Vendors / Flowpaper Records 23 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 2
CVSS high 4
Exploited now Flowpaper records in CISA KEV No Flowpaper vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 74
The Publish Service in FlexPaper (later renamed FlowPaper) 2.3.6 allows remote code execution via setup.php and change_config.php.
CVSS 3.0 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.52542 · Published 2019-07-03 · No fix listed CWE-20
Priority LOW 30
Cross-site scripting (XSS) vulnerability in FlexPaperViewer.swf in Flexpaper before 2.3.1 allows remote attackers to inject arbitrary web script or HTML via the Swfile parameter.
CVSS 3.0 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.01151 · Published 2017-10-17 · No fix listed CWE-79
Priority LOW 29
FlexPaperViewer.swf in Flexpaper before 2.3.1 allows remote attackers to conduct content-spoofing attacks via the Swfile parameter.
CVSS 3.0 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.01031 · Published 2017-10-17 · No fix listed CWE-20
Open these records in search → All records by CVSS severity
2 4 17 0 0
