TI-2023-10685 CVE-2023-25261 · GHSA-fj34-r2c9-hq4p
Certain Stimulsoft GmbH products are affected by: Remote Code Execution.
Priority HIGH 75
Certain Stimulsoft GmbH products are affected by: Remote Code Execution.
Stimulsoft
Records9All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical4CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
Stimulsoft records in CISA KEVNo Stimulsoft vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
4 records in Designer · all components
TI-2023-10686 CVE-2023-25262 · GHSA-f289-g9w2-9j5h
Stimulsoft GmbH Stimulsoft Designer (Web) 2023.1.3 is vulnerable to Server Side Request…
Priority HIGH 72
Stimulsoft GmbH Stimulsoft Designer (Web) 2023.1.3 is vulnerable to Server Side Request Forgery (SSRF).
TI-2023-10684 CVE-2023-25260 · GHSA-jfmf-9mmf-25ww
Stimulsoft Designer (Web) 2023.1.3 is vulnerable to Local File Inclusion.
Priority HIGH 72
Stimulsoft Designer (Web) 2023.1.3 is vulnerable to Local File Inclusion.
TI-2023-10687 CVE-2023-25263 · GHSA-v4pr-w7x8-m4mg
In Stimulsoft Designer (Desktop) 2023.1.5, and 2023.1.4, once an attacker decompiles the…
Priority MEDIUM 58
In Stimulsoft Designer (Desktop) 2023.1.5, and 2023.1.4, once an attacker decompiles the Stimulsoft.report.dll the attacker is able to decrypt any connectionstring stored in .mrt files since a static secret is used.