AI-generated from public sourcesThe starting point for every profile: auto-generated by 0-Doubt from public vendor materials, and not yet confirmed by the vendor or an independent analyst. Nothing here is hidden or overstated — it simply has not been reviewed yet.Where every profile starts, before the vendor or an analyst has reviewed it. A higher label means a more independent source — not a better product.How trust works →Secure coding rating: 38/100How this score is computedA product with no known CVEs starts at a neutral score and climbs the longer it goes without one; a product with known CVEs is penalized by severity instead. This one has 3 known CVEs (vendor-level match — see the CVE list below) and is tracked as ~51 days old in our catalog (a stand-in for real release date, which we don't track). The platform admin controls the formula's weights.
Bottomline (NASDAQ: EPAY), founded in 2005, provides business payment infrastructure that includes fraud detection and compliance tooling alongside cash management.
Known CVEs (3)About this listSourced from the public NVD database, matched by vendor name. Shown here at the vendor level — we don't track per-product/version data, so a listed CVE may affect a different product from this vendor, not necessarily this one. “New” means published within the last 30 days. “Actively exploited” means CISA's Known Exploited Vulnerabilities (KEV) catalog confirms real-world exploitation, not just a theoretical severity score. An “EPSS” chip appears at 10% and above: that is FIRST's estimated chance of exploitation in the next 30 days, which measures likelihood rather than impact and so can differ sharply from the severity beside it.
Multiple cross-site scripting (XSS) vulnerabilities in the Transform Content Center in Bottomline Technologies Transform Foundation Server before 4.3.1 Patch 8 and 5.x before 5.2 Patch 7 allow remote …
The change password functionality in Bottomline Webseries Payment Application does not require the old password when users enter a new password, which could allow remote authenticated users to change …
Bottomline provides business payment infrastructure that includes fraud detection and compliance tooling, cash management, and a payments network for businesses and financial institutions. Its platform automates payment processes, centralizes payments, and offers AI‑driven fraud defense to reduce risk and improve efficiency.
Strengths
AI‑driven fraud platform
60% of customers cut AP costs by half or more
80% of vendors say Paymode makes it possible to receive faster payments
578% more digital payments than planned
110% more enrolled rebate‑generating spend than forecasted
50% less time on invoice capture
Materials
0
No datasheets, whitepapers, case studies, videos, or demos linked yet.
Bottomline Webseries Payment Application allows remote attackers to read arbitrary files on the network via a report template with modified ReportPath or ReportName values.
