Vendors / Extensis Records 10 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 8
Exploited now Extensis records in CISA KEV No Extensis vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 43
An unrestricted file upload vulnerability in the Backup/Restore Archive component of Extensis Portfolio v4.0 allows remote attackers to execute arbitrary code via a crafted ZIP file.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.026 · Published 2022-03-01 · No fix listed CWE-434
Priority MEDIUM 43
An unrestricted file upload vulnerability in the FileTransferServlet component of Extensis Portfolio v4.0 allows remote attackers to execute arbitrary code via a crafted file.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.02333 · Published 2022-03-01 · No fix listed CWE-434
Priority MEDIUM 41
Extensis Portfolio v4.0 was discovered to contain hardcoded credentials which allows attackers to gain administrator privileges.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01376 · Published 2022-03-01 · No fix listed CWE-798
Priority MEDIUM 41
Extensis Portfolio v4.0 was discovered to contain an authenticated unrestricted file upload vulnerability via the component AdminFileTransferServlet.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01304 · Published 2022-03-01 · No fix listed CWE-434
Priority MEDIUM 41
Extensis Portfolio v4.0 was discovered to contain an authenticated unrestricted file upload vulnerability via the Catalog Asset Upload function.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.0134 · Published 2022-03-01 · No fix listed CWE-434
Open these records in search → All records by CVSS severity
0 8 2 0 0
THREATIST.IORead the docs