Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Priority LOW 38

In Ashlar-Vellum Cobalt versions prior to v12 SP2 Build (1204.200), the affected application lacks proper validation of user-supplied data when parsing XE files.

CVSS 4.0HIGH 8.4 Local No auth User interaction EPSS 0.00202 Published 2025-02-04 Fixed in v12 SP2 Build (1204.200) CWE-787
Priority LOW 38

In Ashlar-Vellum Cobalt versions prior to v12 SP2 Build (1204.200), the affected application lacks proper validation of user-supplied data when parsing CO files.

CVSS 4.0HIGH 8.4 Local No auth User interaction EPSS 0.00205 Published 2025-02-04 Fixed in v12 SP2 Build (1204.200) CWE-122