Read the docs

Redwood

Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

Redwood records in CISA KEV

No Redwood vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Sap Business Process Automation 3 records MEDIUM Report2web 2 records LOW Jscape Mft 1 record MEDIUM

Records

6 records

TI-2023-04176 CVE-2023-4528 · GHSA-4r87-55rm-3493

JSCAPE MFT Server Unsafe Deserialization on Management Port

Priority MEDIUM 58

Unsafe deserialization in JSCAPE MFT Server versions prior to 2023.1.9 (Windows, Linux, and MacOS) permits an attacker to run arbitrary Java code (including OS commands) via its management interface

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.3186 Published 2023-09-07 Fixed in 2023.1.9 CWE-502
TI-2018-01789 CVE-2018-2401 · GHSA-689x-4mp2-jffr

XML external entity injection in SAP Business Process Automation By Redwood

Priority MEDIUM 41

SAP Business Process Automation (BPA) By Redwood does not sufficiently validate an XML document accepted from an untrusted source resulting in an XML External Entity (XXE) vulnerability.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.01587 Published 2018-03-14 No fix listed CWE-611
TI-2018-01754 CVE-2018-2366 · GHSA-mg6c-9wrm-f57p

Path traversal in SAP Business Process Automation By Redwood

Priority LOW 23

SAP Business Process Automation (BPA) By Redwood, 9.0, 9.1, allows an attacker to exploit insufficient validation of path information provided by users, thus characters representing 'traverse to parent directory' are pas…

CVSS 3.0MEDIUM 4.3 Network Low privileges No interaction EPSS 0.01512 Published 2018-03-14 No fix listed CWE-22
Open these records in search →