Vulnerabilities

TI-2023-10686 CVE-2023-25262 · GHSA-f289-g9w2-9j5h

Stimulsoft GmbH Stimulsoft Designer (Web) 2023.1.3 is vulnerable to Server Side Request…

HIGH 72

Stimulsoft GmbH Stimulsoft Designer (Web) 2023.1.3 is vulnerable to Server Side Request Forgery (SSRF).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.009 Published 2023-03-28 No fix listed CWE-918

TI-2023-10684 CVE-2023-25260 · GHSA-jfmf-9mmf-25ww

Stimulsoft Designer (Web) 2023.1.3 is vulnerable to Local File Inclusion.

HIGH 72

Stimulsoft Designer (Web) 2023.1.3 is vulnerable to Local File Inclusion.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00844 Published 2023-03-28 No fix listed CWE-552

TI-2023-10687 CVE-2023-25263 · GHSA-v4pr-w7x8-m4mg

In Stimulsoft Designer (Desktop) 2023.1.5, and 2023.1.4, once an attacker decompiles the…

MEDIUM 58

In Stimulsoft Designer (Desktop) 2023.1.5, and 2023.1.4, once an attacker decompiles the Stimulsoft.report.dll the attacker is able to decrypt any connectionstring stored in .mrt files since a static secret is used.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00234 Published 2023-03-27 No fix listed CWE-312

TI-2023-10685 CVE-2023-25261 · GHSA-fj34-r2c9-hq4p

Certain Stimulsoft GmbH products are affected by: Remote Code Execution.

HIGH 75

Certain Stimulsoft GmbH products are affected by: Remote Code Execution.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01903 Published 2023-03-27 No fix listed CWE-94

Vulnerabilities

Filters

Stimulsoft GmbH Stimulsoft Designer (Web) 2023.1.3 is vulnerable to Server Side Request…

Stimulsoft Designer (Web) 2023.1.3 is vulnerable to Local File Inclusion.

In Stimulsoft Designer (Desktop) 2023.1.5, and 2023.1.4, once an attacker decompiles the…

Certain Stimulsoft GmbH products are affected by: Remote Code Execution.