Vendors / ClipSoft Records 6 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 1
Exploited now ClipSoft records in CISA KEV No ClipSoft vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 41
ClipSoft REXPERT 1.0.0.527 and earlier version allows arbitrary file creation and execution via report print function of rexpert viewer with modified XML document.
CVSS 3.1 HIGH 8.8· Network · No auth · User interaction · EPSS 0.01594 · Published 2019-10-30 · No fix listed CWE-91
Priority LOW 32
ClipSoft REXPERT 1.0.0.527 and earlier version allows remote attacker to arbitrary file deletion by issuing a HTTP GET request with a specially crafted parameter.
CVSS 3.1 MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.01337 · Published 2019-10-30 · No fix listed CWE-264
Priority LOW 31
ClipSoft REXPERT 1.0.0.527 and earlier version allows remote attacker to upload arbitrary local file via the ActiveX method in RexViewerCtrl30.ocx.
CVSS 3.1 MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.01247 · Published 2019-10-30 · No fix listed CWE-434
Priority LOW 31
ClipSoft REXPERT 1.0.0.527 and earlier version allows directory traversal by issuing a special HTTP POST request with ../ characters.
CVSS 3.1 MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.01212 · Published 2019-10-30 · No fix listed CWE-22
Priority LOW 31
ClipSoft REXPERT 1.0.0.527 and earlier version allows arbitrary file creation via a POST request with the parameter set to the file path to be written.
CVSS 3.1 MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.01224 · Published 2019-10-30 · No fix listed CWE-264
Priority LOW 26
ClipSoft REXPERT 1.0.0.527 and earlier version have an information disclosure issue.
CVSS 3.1 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.0093 · Published 2019-10-30 · No fix listed CWE-200
Open these records in search → All records by CVSS severity
0 1 5 0 0
THREATIST.IORead the docs