Vulnerabilities

TI-2023-16560 CVE-2023-33515 · GHSA-55vp-48gh-h27h

SoftExpert Excellence Suite 2.1.9 is vulnerable to Cross Site Scripting (XSS) via query screens.

LOW 25

SoftExpert Excellence Suite 2.1.9 is vulnerable to Cross Site Scripting (XSS) via query screens.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00409 Published 2023-06-14 No fix listed CWE-79

TI-2023-14229 CVE-2023-30330 · GHSA-hfvw-hqwf-qh99

SoftExpert (SE) Excellence Suite 2.x versions before 2.1.3 is vulnerable to Local File…

HIGH 82

SoftExpert (SE) Excellence Suite 2.x versions before 2.1.3 is vulnerable to Local File Inclusion in the function /se/v42300/generic/gn_defaultframe/2.0/defaultframe_filter.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.05877 Published 2023-05-12 No fix listed CWE-426

TI-2018-09312 CVE-2018-12977 · GHSA-5mc9-j73j-vp2m

A SQL injection vulnerability in the SoftExpert (SE) Excellence Suite 2.0 allows remote…

MEDIUM 41

A SQL injection vulnerability in the SoftExpert (SE) Excellence Suite 2.0 allows remote authenticated users to perform SQL heuristics by pulling information from the database with the "cddocument" parameter in the "Downl…

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.01441 Published 2018-07-09 No fix listed CWE-89

Vulnerabilities

Filters

SoftExpert Excellence Suite 2.1.9 is vulnerable to Cross Site Scripting (XSS) via query screens.

SoftExpert (SE) Excellence Suite 2.x versions before 2.1.3 is vulnerable to Local File…

A SQL injection vulnerability in the SoftExpert (SE) Excellence Suite 2.0 allows remote…