Vendors / Xerte Records 5 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 3
CVSS high 1
Exploited now Xerte records in CISA KEV No Xerte vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 52
An Authenticated Remote Code Exection (RCE) vulnerability exists in Xerte through 3.9 in website_code/php/import/fileupload.php by uploading a maliciously crafted PHP file though the project interface disguised as a lang…
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.12782 · Published 2022-02-24 · No fix listed CWE-22
Priority LOW 39
A Directory Traversal vulnerability exists in the Xerte Project Xerte through 3.10.3 when downloading a project file via download.php.
CVSS 3.1 MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.07685 · Published 2022-02-24 · No fix listed CWE-22
Open these records in search → All records by CVSS severity
3 1 1 0 0
