Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Stimulsoft Component: Reports Clear all filters
TI-2021-18979 CVE-2021-42777 · GHSA-gg9g-9v4f-9pj3

Stimulsoft (aka Stimulsoft Reports) 2013.1.1600.0, when Compilation Mode is used, allows…

Priority MEDIUM 51

Stimulsoft (aka Stimulsoft Reports) 2013.1.1600.0, when Compilation Mode is used, allows an attacker to execute arbitrary C# code on any machine that renders a report, including the application server or a user's local m…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01151 Published 2022-10-29 No fix listed CWE-209
TI-2020-12485 CVE-2020-15865 · GHSA-9m79-c3rf-x6vw

A Remote Code Execution vulnerability in Stimulsoft (aka Stimulsoft Reports)…

Priority MEDIUM 50

A Remote Code Execution vulnerability in Stimulsoft (aka Stimulsoft Reports) 2013.1.1600.0 allows an attacker to encode C# scripts as base-64 in the report XML file so that they will be compiled and executed on the serve…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.05116 Published 2020-08-18 No fix listed CWE-94