Datex-soft

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Datex-soft records in CISA KEV

No Datex-soft vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

E-staff 1 record MEDIUM

Records

1 record in E-staff · all components

TI-2024-26890 CVE-2024-40324 · GHSA-8g2f-8jp6-pr2w

A CRLF injection vulnerability in E-Staff v5.1 allows attackers to insert Carriage Return…

MEDIUM 50

A CRLF injection vulnerability in E-Staff v5.1 allows attackers to insert Carriage Return (CR) and Line Feed (LF) characters into input fields, leading to HTTP response splitting and header manipulation.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00691 Published 2024-07-25 No fix listed CWE-113

Open these records in search →

Critical	1
High	0
Medium	0
Low	0
No CVSS	0