Read the docs

AgilePoint

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

AgilePoint records in CISA KEV

No AgilePoint vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Agilepoint Nx 4 records MEDIUM

Records

4 records

TI-2023-10128 CVE-2023-24507 · GHSA-9229-97hp-fx4j

Unrestricted file upload in AgilePoint NX

Priority MEDIUM 44

AgilePoint NX v8.0 SU2.2 & SU2.3 – Insecure File Upload - Vulnerability allows insecure file upload, by an unspecified request.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00701 Published 2023-05-08 Fixed in v8.0 SU2.4 CWE-434
TI-2023-14888 CVE-2023-31178 · GHSA-w3r7-r2x6-7c9p

AgilePoint NX v8.0 SU2.2 & SU2.3 – Arbitrary File Delete

Priority MEDIUM 40

AgilePoint NX v8.0 SU2.2 & SU2.3 – Arbitrary File Delete Vulnerability allows arbitrary file deletion, by an unspecified request.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00608 Published 2023-05-08 Fixed in v8.0 SU2.4
TI-2022-12755 CVE-2022-30619 · GHSA-4mxr-78jp-x8jx

Agile Point - Agile Point NX SQL injection (SQLi)

Priority LOW 39

Editable SQL Queries behind Base64 encoding sending from the Client-Side to The Server-Side for a particular API used in legacy Work Center module.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00778 Published 2022-07-06 No fix listed CWE-89
TI-2023-14889 CVE-2023-31179 · GHSA-f964-36q9-cfj7

Path traversal in AgilePoint NX

Priority LOW 34

AgilePoint NX v8.0 SU2.2 & SU2.3 - Path traversal - Vulnerability allows path traversal and downloading files from the server, by an unspecified request.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00701 Published 2023-05-08 Fixed in v8.0 SU2.4 CWE-22
Open these records in search →