Landray

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Landray records in CISA KEV

No Landray vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Landray Ekp 3 records HIGH Landray Office Automation 1 record LOW

Records

3 records in Landray Ekp · all components

TI-2024-10411 CVE-2024-11238 · GHSA-2vhg-q6f6-xjf6

Landray EKP sysUiComponent.do delPreviewFile path traversal

HIGH 70

A vulnerability, which was classified as critical, was found in Landray EKP up to 16.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.05747 Published 2024-11-15 No fix listed CWE-22

TI-2024-10412 CVE-2024-11239 · GHSA-fpgf-f3hj-fcgm

Landray EKP API Interface import.do deleteFile path traversal

MEDIUM 57

A vulnerability has been found in Landray EKP up to 16.0 and classified as critical.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.01545 Published 2024-11-15 No fix listed CWE-22

TI-2021-02243 CVE-2021-3159 · GHSA-3m5r-vf35-8v65

A stored cross site scripting (XSS) vulnerability in the /sys/attachment/uploaderServlet…

LOW 25

A stored cross site scripting (XSS) vulnerability in the /sys/attachment/uploaderServlet component of Landray EKP V12.0.9.R.20160325 allows attackers to execute arbitrary web scripts or HTML via a crafted SVG, SHTML, or…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.0052 Published 2021-07-23 No fix listed CWE-79

Open these records in search →

Critical	0
High	1
Medium	3
Low	0
No CVSS	0