Deltek

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Deltek records in CISA KEV

No Deltek vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Ajera 1 record MEDIUM Maconomy 1 record HIGH Vision 1 record MEDIUM

Records

3 records

TI-2019-09186 CVE-2019-12314 · GHSA-m2jw-qr8p-cx48

Deltek Maconomy 2.2.5 is prone to local file inclusion via absolute path traversal in the…

HIGH 83

Deltek Maconomy 2.2.5 is prone to local file inclusion via absolute path traversal in the WS.macx1.W_MCS/ PATH_INFO, as demonstrated by a cgi-bin/Maconomy/MaconomyWS.macx1.W_MCS/etc/passwd URI.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.8382 Published 2019-05-24 No fix listed CWE-22

TI-2018-14330 CVE-2018-20221 · GHSA-2899-wfp7-cq2f

Secure/SAService.rem in Deltek Ajera Timesheets 9.10.16 and prior are vulnerable to…

MEDIUM 51

Secure/SAService.rem in Deltek Ajera Timesheets 9.10.16 and prior are vulnerable to remote code execution via deserialization of untrusted user input from an authenticated user.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.10269 Published 2019-03-17 No fix listed CWE-502

TI-2018-12899 CVE-2018-18251 · GHSA-7r2g-9ch4-c2hp

Deltek Vision 7.x before 7.6 permits the execution of any attacker supplied SQL statement…

MEDIUM 45

Deltek Vision 7.x before 7.6 permits the execution of any attacker supplied SQL statement through a custom RPC over HTTP protocol.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01551 Published 2019-04-24 No fix listed CWE-798

Open these records in search →

Critical	2
High	1
Medium	0
Low	0
No CVSS	0