Vulnerabilities

TI-2024-10412 CVE-2024-11239 · GHSA-fpgf-f3hj-fcgm

Landray EKP API Interface import.do deleteFile path traversal

MEDIUM 57

A vulnerability has been found in Landray EKP up to 16.0 and classified as critical.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.01545 Published 2024-11-15 No fix listed CWE-22

TI-2024-10411 CVE-2024-11238 · GHSA-2vhg-q6f6-xjf6

Landray EKP sysUiComponent.do delPreviewFile path traversal

HIGH 70

A vulnerability, which was classified as critical, was found in Landray EKP up to 16.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.05747 Published 2024-11-15 No fix listed CWE-22

TI-2022-15709 CVE-2022-34924 · GHSA-5r46-4f86-pmc5

Lanling OA Landray Office Automation (OA) internal patch number #133383/#137780 contains…

LOW 34

Lanling OA Landray Office Automation (OA) internal patch number #133383/#137780 contains an arbitrary file read vulnerability via the component /sys/ui/extend/varkind/custom.jsp.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00641 Published 2022-08-02 No fix listed CWE-312

TI-2021-02243 CVE-2021-3159 · GHSA-3m5r-vf35-8v65

A stored cross site scripting (XSS) vulnerability in the /sys/attachment/uploaderServlet…

LOW 25

A stored cross site scripting (XSS) vulnerability in the /sys/attachment/uploaderServlet component of Landray EKP V12.0.9.R.20160325 allows attackers to execute arbitrary web scripts or HTML via a crafted SVG, SHTML, or…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.0052 Published 2021-07-23 No fix listed CWE-79

Vulnerabilities

Filters

Landray EKP API Interface import.do deleteFile path traversal

Landray EKP sysUiComponent.do delPreviewFile path traversal

Lanling OA Landray Office Automation (OA) internal patch number #133383/#137780 contains…

A stored cross site scripting (XSS) vulnerability in the /sys/attachment/uploaderServlet…