Vendors / Jedox Records 8 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 3
CVSS high 2
Exploited now Jedox records in CISA KEV No Jedox vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 52
A Directory Traversal vulnerability in /be/erpc.php in Jedox GmbH Jedox 2020.2.5 allows remote authenticated users to execute arbitrary code.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.1016 · Published 2023-05-02 · No fix listed CWE-22
Priority MEDIUM 48
Improper Access Control in /tc/rpc in Jedox GmbH Jedox 2020.2.5 allows remote authenticated users to view details of database connections via class 'com.jedox.etl.mngr.Connections' and method 'getGlobalConnection'.
CVSS 3.1 MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.21127 · Published 2023-05-02 · No fix listed CWE-863
Open these records in search → All records by CVSS severity
3 2 3 0 0
