Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: STVS SA Clear all filters
TI-2021-22341 CVE-2021-47724 · GHSA-5wfc-7v23-c2vf

STVS ProVision Authenticated File Disclosure via archive.rb

Priority HIGH 70

STVS ProVision 5.9.10 contains a path traversal vulnerability that allows authenticated attackers to access arbitrary files by manipulating the files parameter in the archive download functionality.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00769 Published 2025-12-09 No fix listed CWE-22
TI-2021-22340 CVE-2021-47723 · GHSA-q28j-qr7m-gpf6

STVS ProVision Cross-Site Request Forgery (Add Admin)

Priority MEDIUM 64

STVS ProVision 5.9.10 contains a cross-site request forgery vulnerability that allows attackers to perform actions with administrative privileges by exploiting unvalidated HTTP requests.

CVSS 4.0MEDIUM 6.9 Network No auth User interaction EPSS 0.00199 Published 2025-12-09 No fix listed CWE-352