Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Vendor: ClipSoft Clear all filters
TI-2019-12926 CVE-2019-17326 · GHSA-cv3x-4274-fr24

Access control flaw in ClipSoft REXPERT

Priority LOW 32

ClipSoft REXPERT 1.0.0.527 and earlier version allows remote attacker to arbitrary file deletion by issuing a HTTP GET request with a specially crafted parameter.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01337 Published 2019-10-30 No fix listed CWE-264
TI-2019-12925 CVE-2019-17325 · GHSA-5549-7vqp-pvxq

Unrestricted file upload in ClipSoft REXPERT

Priority LOW 31

ClipSoft REXPERT 1.0.0.527 and earlier version allows remote attacker to upload arbitrary local file via the ActiveX method in RexViewerCtrl30.ocx.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01247 Published 2019-10-30 No fix listed CWE-434
TI-2019-12924 CVE-2019-17324 · GHSA-7w8f-7c7v-j4fm

Path traversal in ClipSoft REXPERT

Priority LOW 31

ClipSoft REXPERT 1.0.0.527 and earlier version allows directory traversal by issuing a special HTTP POST request with ../ characters.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01212 Published 2019-10-30 No fix listed CWE-22
TI-2019-12923 CVE-2019-17323 · GHSA-q8c5-p3cq-8mh2

XML injection in ClipSoft REXPERT

Priority MEDIUM 41

ClipSoft REXPERT 1.0.0.527 and earlier version allows arbitrary file creation and execution via report print function of rexpert viewer with modified XML document.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01594 Published 2019-10-30 No fix listed CWE-91
TI-2019-12922 CVE-2019-17322 · GHSA-2cqr-c5qf-cc3q

Access control flaw in ClipSoft REXPERT

Priority LOW 31

ClipSoft REXPERT 1.0.0.527 and earlier version allows arbitrary file creation via a POST request with the parameter set to the file path to be written.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01224 Published 2019-10-30 No fix listed CWE-264
TI-2019-12921 CVE-2019-17321 · GHSA-mpcf-8q93-cjx2

Information disclosure in ClipSoft REXPERT

Priority LOW 26

ClipSoft REXPERT 1.0.0.527 and earlier version have an information disclosure issue.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0093 Published 2019-10-30 No fix listed CWE-200