Vulnerabilidades en ClipSoft
6 resultadosAnálisis Vexday
A ClipSoft apresenta um perfil de risco baixo com apenas 6 vulnerabilidades catalogadas e nenhuma sob exploração ativa no panorama atual. Não há vulnerabilidades críticas e o portfólio de fraquezas é dominado por problemas de permissões (CWE-264), indicando um risco controlado. A ausência de publicações recentes sugere que o fornecedor não está no foco imediato de pesquisadores de segurança.
CVE-2019-17323—ClipSoft REXPERT 1.0.0.527 and earlier version allows arbitrary file creation and execution via report print function of rexpert viewer withEPSS 1.6%CVE-2019-17326—ClipSoft REXPERT 1.0.0.527 and earlier version allows remote attacker to arbitrary file deletion by issuing a HTTP GET request with a speciaEPSS 1.3%CVE-2019-17325—ClipSoft REXPERT 1.0.0.527 and earlier version allows remote attacker to upload arbitrary local file via the ActiveX method in RexViewerCtrlEPSS 1.2%CVE-2019-17322—ClipSoft REXPERT 1.0.0.527 and earlier version allows arbitrary file creation via a POST request with the parameter set to the file path to EPSS 1.2%CVE-2019-17324—ClipSoft REXPERT 1.0.0.527 and earlier version allows directory traversal by issuing a special HTTP POST request with ../ characters. This cEPSS 1.2%CVE-2019-17321—ClipSoft REXPERT 1.0.0.527 and earlier version have an information disclosure issue. When requesting web page associated with session, couldEPSS 0.9%