Extensis Portfolio
5 CVEs affecting Extensis Portfolio. Latest disclosed: 2022-03-01. Critical: 0, High: 5.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-24255 | High | 8.8 | 2022-03-01 | Extensis Portfolio v4.0 was discovered to contain hardcoded credentials which allows attackers to gain administrator privileges. |
CVE-2022-24254 | High | 8.8 | 2022-03-01 | An unrestricted file upload vulnerability in the Backup/Restore Archive component of Extensis Portfolio v4.0 allows remote attackers to execute arbitrary code… |
CVE-2022-24253 | High | 8.8 | 2022-03-01 | Extensis Portfolio v4.0 was discovered to contain an authenticated unrestricted file upload vulnerability via the component AdminFileTransferServlet. |
CVE-2022-24252 | High | 8.8 | 2022-03-01 | An unrestricted file upload vulnerability in the FileTransferServlet component of Extensis Portfolio v4.0 allows remote attackers to execute arbitrary code via… |
CVE-2022-24251 | High | 8.8 | 2022-03-01 | Extensis Portfolio v4.0 was discovered to contain an authenticated unrestricted file upload vulnerability via the Catalog Asset Upload function. |