1e
8 CVEs across 4 1e products. Browse 1e vulnerabilities, severities, and proof-of-concept exploits.
1e products with known CVEs
1e CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2025-1683 | High | 7.8 | 2025-03-12 | Improper link resolution before file access in the Nomad module of the 1E Client, in versions prior to 25.3, enables an attacker with local unprivileged access… |
CVE-2024-7211 | Medium | 4.7 | 2024-08-01 | The 1E Platform's component utilized the third-party Duende Identity Server, which suffered from an open redirect vulnerability, permitting an attacker to cont… |
CVE-2023-5964 | Critical | 9.9 | 2023-11-06 | The 1E-Exchange-DisplayMessageinstruction that is part of the End-User Interaction product pack available on the 1E Exchange does not properly validate the Cap… |
CVE-2023-45163 | Critical | 9.9 | 2023-11-06 | The 1E-Exchange-CommandLinePing instruction that is part of the Network product pack available on the 1E Exchange does not properly validate the input paramete… |
CVE-2023-45161 | Critical | 9.9 | 2023-11-06 | The 1E-Exchange-URLResponseTime instruction that is part of the Network product pack available on the 1E Exchange does not properly validate the URL parameter… |
CVE-2023-45162 | Critical | 9.9 | 2023-10-13 | Affected 1E Platform versions have a Blind SQL Injection vulnerability that can lead to arbitrary code execution.
Application of the relevant hotfix remediat… |
CVE-2023-45160 | High | 8.8 | 2023-10-05 | In the affected version of the 1E Client, an ordinary user could subvert downloaded instruction resource files, e.g., to substitute a harmful script. by replac… |
CVE-2023-45159 | High | 8.4 | 2023-10-05 | 1E Client installer can perform arbitrary file deletion on protected files.
A non-privileged user could provide a symbolic link or Windows junction to point… |
CVE-2020-27645 | High | 8.8 | 2020-12-29 | The Inventory module of the 1E Client 5.0.0.745 doesn't handle an unquoted path when executing %PROGRAMFILES%\1E\Client\Tachyon.Performance.Metrics.exe. This m… |
CVE-2020-27644 | High | 8.8 | 2020-12-29 | The Inventory module of the 1E Client 5.0.0.745 doesn't handle an unquoted path when executing %PROGRAMFILES%\1E\Client\Tachyon.Performance.Metrics.exe. This m… |
CVE-2020-27643 | Medium | 6.5 | 2020-12-29 | The %PROGRAMDATA%\1E\Client directory in 1E Client 5.0.0.745 and 4.1.0.267 allows remote authenticated users and local users to create and modify files in prot… |
CVE-2020-16268 | High | 8.8 | 2020-12-29 | The MSI installer in 1E Client 4.1.0.267 and 5.0.0.745 allows remote authenticated users and local users to gain elevated privileges via the repair option. Thi… |