Priority MEDIUM 47
An issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02509 · Published 2020-04-06 · No fix listed CWE-306
Priority MEDIUM 45
An issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0148 · Published 2020-04-06 · No fix listed CWE-89
Priority MEDIUM 45
An XXE issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01247 · Published 2020-04-06 · No fix listed CWE-611
Priority MEDIUM 40
Unrestricted Upload of File with Dangerous Type vulnerabilities exist in the rich text editor and document manage components in CIPPlanner CIPAce before 9.17.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00343 · Published 2026-02-11 · No fix listed CWE-434
Priority MEDIUM 40
Vulnerabilities in the My Account and User Management components in CIPPlanner CIPAce before 9.17 allows attackers to escalate their access levels.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00276 · Published 2026-02-11 · No fix listed CWE-269
Priority LOW 39
Vulnerabilities in the File Download and Get File handler components in CIPPlanner CIPAce before 9.17 allow attackers to download unauthorized files.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00276 · Published 2026-02-11 · No fix listed CWE-285
Priority LOW 36
A Directory Traversal issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01768 · Published 2020-04-06 · No fix listed CWE-22
Priority LOW 35
An issue was discovered in CIPPlanner CIPAce 6.80 Build 2016031401.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01104 · Published 2020-04-06 · No fix listed CWE-306
Priority LOW 35
An issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01209 · Published 2020-04-06 · No fix listed
Priority LOW 35
An issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01209 · Published 2020-04-06 · No fix listed CWE-209
Priority LOW 35
An issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00992 · Published 2020-04-06 · No fix listed CWE-74
Priority LOW 35
An issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01209 · Published 2020-04-06 · No fix listed
Priority LOW 35
An Insecure Direct Object Reference issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01132 · Published 2020-04-06 · No fix listed CWE-639
Priority LOW 35
An issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01209 · Published 2020-04-06 · No fix listed
Priority LOW 26
An issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00963 · Published 2020-04-06 · No fix listed
Priority LOW 26
An issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00963 · Published 2020-04-06 · No fix listed
Priority LOW 26
An issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00963 · Published 2020-04-06 · No fix listed
Priority LOW 20
A Use of Single-factor Authentication vulnerability in the Authentication component of CIPPlanner CIPAce before 9.17 allows attackers to bypass a protection mechanism.
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00279 · Published 2026-02-11 · No fix listed CWE-308