Ahsay Cloud_backup_suite
7 CVEs affecting Ahsay Cloud_backup_suite. Latest disclosed: 2022-09-21. Critical: 0, High: 6.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-5846 | High | 8.8 | 2020-01-06 | An insecure file upload and code execution issue was discovered in Ahsay Cloud Backup Suite 8.3.0.30 via a "PUT /obs/obm7/file/upload" request with the base64-… |
CVE-2019-10267 | High | 8.8 | 2019-07-26 | An insecure file upload and code execution issue was discovered in Ahsay Cloud Backup Suite 8.1.0.50. It is possible to upload a file into any directory of the… |
CVE-2019-10266 | High | 7.5 | 2019-07-26 | An issue was discovered in Ahsay Cloud Backup Suite before 8.1.1.50. When sending an out-of-bounds XML document to a URL, it is possible to read the file struc… |
CVE-2019-10265 | High | 7.5 | 2019-07-26 | An issue was discovered in Ahsay Cloud Backup Suite before 8.1.1.50. On the /cbs/system/ShowAdvanced.do "File Explorer" screen, it is possible to change the di… |
CVE-2022-37027 | High | 7.2 | 2022-09-21 | Ahsay AhsayCBS 9.1.4.0 allows an authenticated system user to inject arbitrary Java JVM options. Administrators that can modify the Runtime Options in the web… |
CVE-2019-10264 | High | 7.2 | 2019-07-26 | An issue was discovered in Ahsay Cloud Backup Suite before 8.1.1.50. With a valid administrator account, the "Move / Import / Export Users" screen has an Impor… |
CVE-2019-10263 | Medium | 6.1 | 2019-07-26 | An issue was discovered in Ahsay Cloud Backup Suite before 8.1.1.50. When creating a trial account, it is possible to inject XSS in the Alias field, allowing t… |