CHANGING Inc. — Vulnerabilities & Security Advisories 6

CHANGING Inc. develops enterprise workflow automation software used by organizations to streamline business processes. Historically, their products have been vulnerable to remote code execution, cross-site scripting, and privilege escalation flaws, with six CVEs documented. Security researchers have identified authentication bypass issues and insufficient input validation as recurring problems. While no major public breaches have been reported, their widespread deployment in critical infrastructure makes them a potential high-value target. The company has shown inconsistent patch response times, leaving some vulnerabilities unaddressed for extended periods. Their architecture's complexity increases attack surfaces, particularly in integration modules connecting to third-party systems.