Read the docs

ACTIVESOFT

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

ACTIVESOFT records in CISA KEV

No ACTIVESOFT vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

2 records in Mybuilder · all components

TI-2019-09594 CVE-2019-12812 · GHSA-jq63-3p3v-m99f

OS command injection in ACTIVESOFT MyBuilder

Priority MEDIUM 47

MyBuilder viewer before 6.2.2019.814 allow an attacker to execute arbitrary command via specifically crafted configuration file.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02726 Published 2019-10-07 Fixed in 6.2.2019.814 CWE-78
TI-2019-09593 CVE-2019-12811 · GHSA-hw28-2wwc-xj8m

OS command injection in ACTIVESOFT MyBuilder

Priority MEDIUM 46

ActiveX Control in MyBuilder before 6.2.2019.814 allow an attacker to execute arbitrary command via the ShellOpen method.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0216 Published 2019-10-07 Fixed in 6.2.2019.814 CWE-78
Open these records in search →