Clipsoft Rexpert
6 CVEs affecting Clipsoft Rexpert. Latest disclosed: 2019-10-30. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-17323 | High | 8.8 | 2019-10-30 | ClipSoft REXPERT 1.0.0.527 and earlier version allows arbitrary file creation and execution via report print function of rexpert viewer with modified XML docum… |
CVE-2019-17326 | Medium | 6.5 | 2019-10-30 | ClipSoft REXPERT 1.0.0.527 and earlier version allows remote attacker to arbitrary file deletion by issuing a HTTP GET request with a specially crafted paramet… |
CVE-2019-17325 | Medium | 6.5 | 2019-10-30 | ClipSoft REXPERT 1.0.0.527 and earlier version allows remote attacker to upload arbitrary local file via the ActiveX method in RexViewerCtrl30.ocx. That could… |
CVE-2019-17324 | Medium | 6.5 | 2019-10-30 | ClipSoft REXPERT 1.0.0.527 and earlier version allows directory traversal by issuing a special HTTP POST request with ../ characters. This could lead to create… |
CVE-2019-17322 | Medium | 6.5 | 2019-10-30 | ClipSoft REXPERT 1.0.0.527 and earlier version allows arbitrary file creation via a POST request with the parameter set to the file path to be written. This ca… |
CVE-2019-17321 | Medium | 5.3 | 2019-10-30 | ClipSoft REXPERT 1.0.0.527 and earlier version have an information disclosure issue. When requesting web page associated with session, could leak username via… |