Vendors / Dext5 Records 6 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 3
CVSS high 3
Exploited now Dext5 records in CISA KEV No Dext5 vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority LOW 39
DEXT5 Upload 5.0.0.117 and earlier versions contain a vulnerability, which could allow remote attacker to download and execute remote file by setting the argument, variable in the activeX module.
CVSS 3.1 HIGH 8.8· Network · No auth · User interaction · EPSS 0.00626 · Published 2021-10-28 · No fix listed CWE-494
Priority LOW 36
DEXT5Upload 2.7.1262310 and earlier is affected by Directory Traversal in handler/dext5handler.jsp.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.01637 · Published 2020-12-26 · No fix listed CWE-22
Open these records in search → All records by CVSS severity
3 3 0 0 0
