Vulnerabilities

TI-2021-09402 CVE-2021-28173 · GHSA-qcw4-c49j-vc7j

Vangene deltaFlow E-platform - Arbitrary File Upload

MEDIUM 45

The file upload function of Vangene deltaFlow E-platform does not perform access controlled properly.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01641 Published 2021-04-06 No fix listed CWE-434

TI-2021-09401 CVE-2021-28172 · GHSA-jx2q-6pqj-6v8p

LOW 37

There is a Path Traversal vulnerability in the file download function of Vangene deltaFlow E-platform.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01868 Published 2021-04-06 No fix listed CWE-22

TI-2021-09400 CVE-2021-28171 · GHSA-7w8x-g282-6cf2

MEDIUM 45

The Vangene deltaFlow E-platform does not take properly protective measures.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01223 Published 2021-04-06 No fix listed CWE-522