Elcomplus Smartptt
4 CVEs affecting Elcomplus Smartptt. Latest disclosed: 2022-04-28. Critical: 2, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-43934 | Critical | 9.8 | 2022-04-28 | Elcomplus SmartPTT is vulnerable as the backup and restore system does not adequately validate upload requests, enabling a malicious user to potentially upload… |
CVE-2021-43932 | Critical | 9.0 | 2022-04-28 | Elcomplus SmartPTT is vulnerable when an attacker injects JavaScript code into a specific parameter that can executed upon accessing the dashboard or the main… |
CVE-2021-43939 | High | 8.8 | 2022-04-28 | Elcomplus SmartPTT is vulnerable when a low-authenticated user can access higher level administration authorization by issuing requests directly to the desired… |
CVE-2021-43930 | Medium | 4.9 | 2022-04-28 | Elcomplus SmartPTT is vulnerable as the backup and restore system does not adequately validate download requests, enabling malicious users to perform path trav… |