Softexpert

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Softexpert records in CISA KEV

No Softexpert vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Excellence Suite 3 records HIGH

Records

3 records in Excellence Suite · all components

TI-2023-14229 CVE-2023-30330 · GHSA-hfvw-hqwf-qh99

SoftExpert (SE) Excellence Suite 2.x versions before 2.1.3 is vulnerable to Local File…

HIGH 82

SoftExpert (SE) Excellence Suite 2.x versions before 2.1.3 is vulnerable to Local File Inclusion in the function /se/v42300/generic/gn_defaultframe/2.0/defaultframe_filter.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.05877 Published 2023-05-12 No fix listed CWE-426

TI-2018-09312 CVE-2018-12977 · GHSA-5mc9-j73j-vp2m

A SQL injection vulnerability in the SoftExpert (SE) Excellence Suite 2.0 allows remote…

MEDIUM 41

A SQL injection vulnerability in the SoftExpert (SE) Excellence Suite 2.0 allows remote authenticated users to perform SQL heuristics by pulling information from the database with the "cddocument" parameter in the "Downl…

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.01441 Published 2018-07-09 No fix listed CWE-89

TI-2023-16560 CVE-2023-33515 · GHSA-55vp-48gh-h27h

SoftExpert Excellence Suite 2.1.9 is vulnerable to Cross Site Scripting (XSS) via query screens.

LOW 25

SoftExpert Excellence Suite 2.1.9 is vulnerable to Cross Site Scripting (XSS) via query screens.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00409 Published 2023-06-14 No fix listed CWE-79

Open these records in search →

Critical	1
High	1
Medium	1
Low	0
No CVSS	0