TI-2026-76414 CVE-2026-107188 · GHSA-pv68-m9mv-v63w
File upload in Eptura Archibus lets attackers run code on the server
Priority MEDIUM 43
A user can upload export reports with any file contents and specify any contents.
Vulnerabilities
6 records
TI-2026-76413 CVE-2026-107187 · GHSA-xxc6-v8c2-mg2f
Workflow rule in Eptura Archibus exposes sensitive database tables
Priority LOW 37
A user can access any database details, such as usernames and passwords by sending a DWR request with a specified workflow rule.
TI-2026-76412 CVE-2026-107186 · GHSA-fhwf-9fxr-chxq
Authentication bypass in Eptura Archibus DWR API lets workflow rules run
Priority MEDIUM 43
An unauthenticated user can send a DWR request with isPasswordUppercase as one call method and the next call method can be set to a run workflow rule.
TI-2025-19081 CVE-2025-25652 · GHSA-qwr7-q5qh-qpg6
In Eptura Archibus 2024.03.01.109, the "Run script" and "Server File" components of the…
Priority MEDIUM 40
In Eptura Archibus 2024.03.01.109, the "Run script" and "Server File" components of the "Database Update Wizard" are vulnerable to directory traversal.
TI-2023-26492 CVE-2023-48644 · GHSA-xq72-5mqw-j6rc
An issue was discovered in the Archibus app 4.0.3 for iOS.
Priority LOW 27
An issue was discovered in the Archibus app 4.0.3 for iOS.
TI-2023-26493 CVE-2023-48645 · GHSA-5j36-2f99-3384
An issue was discovered in the Archibus app 4.0.3 for iOS.
Priority LOW 35
An issue was discovered in the Archibus app 4.0.3 for iOS.