Landray

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Landray records in CISA KEV

No Landray vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Landray Ekp 3 records HIGH Landray Office Automation 1 record LOW

Records

4 records

TI-2024-10411 CVE-2024-11238 · GHSA-2vhg-q6f6-xjf6

Landray EKP sysUiComponent.do delPreviewFile path traversal

HIGH 70

A vulnerability, which was classified as critical, was found in Landray EKP up to 16.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.05747 Published 2024-11-15 No fix listed CWE-22

TI-2024-10412 CVE-2024-11239 · GHSA-fpgf-f3hj-fcgm

Landray EKP API Interface import.do deleteFile path traversal

MEDIUM 57

A vulnerability has been found in Landray EKP up to 16.0 and classified as critical.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.01545 Published 2024-11-15 No fix listed CWE-22

TI-2022-15709 CVE-2022-34924 · GHSA-5r46-4f86-pmc5

Lanling OA Landray Office Automation (OA) internal patch number #133383/#137780 contains…

LOW 34

Lanling OA Landray Office Automation (OA) internal patch number #133383/#137780 contains an arbitrary file read vulnerability via the component /sys/ui/extend/varkind/custom.jsp.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00641 Published 2022-08-02 No fix listed CWE-312

TI-2021-02243 CVE-2021-3159 · GHSA-3m5r-vf35-8v65

A stored cross site scripting (XSS) vulnerability in the /sys/attachment/uploaderServlet…

LOW 25

A stored cross site scripting (XSS) vulnerability in the /sys/attachment/uploaderServlet component of Landray EKP V12.0.9.R.20160325 allows attackers to execute arbitrary web scripts or HTML via a crafted SVG, SHTML, or…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.0052 Published 2021-07-23 No fix listed CWE-79

Open these records in search →

Critical	0
High	1
Medium	3
Low	0
No CVSS	0