Vendors / Thomsonreuters Records 8 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 4 CVSS 9.0–10.0
CVSS high 4 CVSS 7.0–8.9
Exploited now Thomsonreuters records in CISA KEV No Thomsonreuters vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 48
Directory traversal vulnerability in Thomson Reuters for FATCA before 5.2 allows remote attackers to execute arbitrary files via the item parameter.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.03424 · Published 2020-01-15 · No fix listed CWE-22
Priority MEDIUM 48
A file upload issue exists in the specid parameter in Thomson Reuters FATCH before 5.2, which allows malicious users to upload arbitrary PHP files to the web root and execute system commands.
CVSS 3.1 CRITICAL 9.9· Network · Low privileges · No interaction · EPSS 0.02734 · Published 2020-01-06 · No fix listed CWE-434
Open these records in search → All records by CVSS severity
Critical4 High4 Medium0 Low0 No CVSS0