Priority MEDIUM 40
Unrestricted Upload of File with Dangerous Type vulnerabilities exist in the rich text editor and document manage components in CIPPlanner CIPAce before 9.17.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00343 · Published 2026-02-11 · No fix listed CWE-434
Priority MEDIUM 40
Vulnerabilities in the My Account and User Management components in CIPPlanner CIPAce before 9.17 allows attackers to escalate their access levels.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00276 · Published 2026-02-11 · No fix listed CWE-269
Priority LOW 20
A Use of Single-factor Authentication vulnerability in the Authentication component of CIPPlanner CIPAce before 9.17 allows attackers to bypass a protection mechanism.
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00279 · Published 2026-02-11 · No fix listed CWE-308
Priority LOW 39
Vulnerabilities in the File Download and Get File handler components in CIPPlanner CIPAce before 9.17 allow attackers to download unauthorized files.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00276 · Published 2026-02-11 · No fix listed CWE-285
Priority MEDIUM 45
An XXE issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01247 · Published 2020-04-06 · No fix listed CWE-611
Priority LOW 35
An issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01209 · Published 2020-04-06 · No fix listed
Priority LOW 26
An issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00963 · Published 2020-04-06 · No fix listed
Priority LOW 35
An Insecure Direct Object Reference issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01132 · Published 2020-04-06 · No fix listed CWE-639
Priority LOW 26
An issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00963 · Published 2020-04-06 · No fix listed
Priority LOW 26
An issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00963 · Published 2020-04-06 · No fix listed
Priority LOW 35
An issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01209 · Published 2020-04-06 · No fix listed
Priority LOW 35
An issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00992 · Published 2020-04-06 · No fix listed CWE-74
Priority LOW 35
An issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01209 · Published 2020-04-06 · No fix listed CWE-209
Priority LOW 35
An issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01209 · Published 2020-04-06 · No fix listed
Priority LOW 36
A Directory Traversal issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01768 · Published 2020-04-06 · No fix listed CWE-22
Priority MEDIUM 45
An issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0148 · Published 2020-04-06 · No fix listed CWE-89
Priority MEDIUM 47
An issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02509 · Published 2020-04-06 · No fix listed CWE-306
Priority LOW 35
An issue was discovered in CIPPlanner CIPAce 6.80 Build 2016031401.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01104 · Published 2020-04-06 · No fix listed CWE-306
THREATIST.IORead the docs