Read the docs

Xtuple

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Xtuple records in CISA KEV

No Xtuple vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Postbooks 1 record MEDIUM

Records

1 record in Postbooks · all components

TI-2017-12802 CVE-2017-17525 · GHSA-vph5-qjmh-pfmx

guiclient/guiclient.cpp in xTuple PostBooks 4.7.0 does not validate strings before…

Priority MEDIUM 41

guiclient/guiclient.cpp in xTuple PostBooks 4.7.0 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection att…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.0122 Published 2017-12-14 No fix listed CWE-74
Open these records in search →