Read the docs

Stimulsoft

Records9All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical4CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Stimulsoft records in CISA KEV

No Stimulsoft vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Designer 4 records HIGH Reports 2 records MEDIUM Dashboard.js 1 record MEDIUM Dashboards.js 1 record MEDIUM Dashboards.php 1 record HIGH Viewer 1 record HIGH

Records

2 records in Reports · all components

TI-2021-18979 CVE-2021-42777 · GHSA-gg9g-9v4f-9pj3

Stimulsoft (aka Stimulsoft Reports) 2013.1.1600.0, when Compilation Mode is used, allows…

Priority MEDIUM 51

Stimulsoft (aka Stimulsoft Reports) 2013.1.1600.0, when Compilation Mode is used, allows an attacker to execute arbitrary C# code on any machine that renders a report, including the application server or a user's local m…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01151 Published 2022-10-29 No fix listed CWE-209
TI-2020-12485 CVE-2020-15865 · GHSA-9m79-c3rf-x6vw

A Remote Code Execution vulnerability in Stimulsoft (aka Stimulsoft Reports)…

Priority MEDIUM 50

A Remote Code Execution vulnerability in Stimulsoft (aka Stimulsoft Reports) 2013.1.1600.0 allows an attacker to encode C# scripts as base-64 in the report XML file so that they will be compiled and executed on the serve…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.05116 Published 2020-08-18 No fix listed CWE-94
Open these records in search →