Sibsoft

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Sibsoft records in CISA KEV

No Sibsoft vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Xfilesharing · all components

TI-2019-13665 CVE-2019-18952 · GHSA-24p5-6g2r-2gc4

HIGH 71

SibSoft Xfilesharing through 2.5.1 allows cgi-bin/up.cgi arbitrary file upload.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.44363 Published 2019-11-13 No fix listed CWE-434

TI-2019-13664 CVE-2019-18951 · GHSA-qwjm-gcr8-gjhw

MEDIUM 51

SibSoft Xfilesharing through 2.5.1 allows op=page&tmpl=../ directory traversal to read arbitrary files.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.19781 Published 2019-11-13 No fix listed CWE-22