| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2020-11587 | 5.0 | An issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801. An unauthenticated attacker can make an API request and get the content of ETL Processes running on the server. | 2021-07-21 11:39:00 | 2020-04-06 23:15:00 |
| CVE-2020-11599 | 5.0 | An issue was discovered in CIPPlanner CIPAce 6.80 Build 2016031401. GetDistributedPOP3 allows attackers to obtain the username and password of the SMTP user. | 2021-07-21 11:39:00 | 2020-04-06 22:15:00 |
| CVE-2020-11598 | 7.5 | An issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801. Upload.ashx allows remote attackers to execute arbitrary code by uploading and executing an ASHX file. | 2021-07-21 11:39:00 | 2020-04-06 22:15:00 |
| CVE-2020-11595 | 5.0 | An issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801. An unauthenticated attacker can make an API request and obtain the upload folder path that includes the hostname in a UNC path. | 2021-07-21 11:39:00 | 2020-04-06 22:15:00 |
| CVE-2020-11594 | 5.0 | An issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801. An unauthenticated attacker can make an API request that causes a stack error to be shown providing the full file path. | 2021-07-21 11:39:00 | 2020-04-06 22:15:00 |
| CVE-2020-11592 | 5.0 | An issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801. An unauthenticated attacker can make an API request and get the columns of a specific table within the CIP database. | 2021-07-21 11:39:00 | 2020-04-06 22:15:00 |
| CVE-2020-11591 | 5.0 | An issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801. An unauthenticated attacker can make an API request and obtain the full application path along with the customer name. | 2021-07-21 11:39:00 | 2020-04-06 22:15:00 |
| CVE-2020-11590 | 5.0 | An issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801. An unauthenticated attacker can make an HTTP GET request to HealthPage.aspx and obtain the internal server name. | 2021-07-21 11:39:00 | 2020-04-06 22:15:00 |
| CVE-2020-11589 | 5.0 | An Insecure Direct Object Reference issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801. An unauthenticated attacker can make a GET request to a certain URL and obtain information that should be provided to authenticated users only. | 2021-07-21 11:39:00 | 2020-04-06 22:15:00 |
| CVE-2020-11588 | 5.0 | An issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801. An unauthenticated attacker can make an HTTP GET request to two files that contain customer data and application paths. | 2021-07-21 11:39:00 | 2020-04-06 22:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: