Jedox

8 CVEs across 4 Jedox products. Browse Jedox vulnerabilities, severities, and proof-of-concept exploits.

Jedox products with known CVEs

ProductCVEs
Jedox7
Cloud2
Jedox Cloud2
Palo1
Jedox CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2022-47880Medium5.32023-05-12An Information disclosure vulnerability in /be/rpc.php in Jedox GmbH Jedox 2020.2.5 allow remote, authenticated users with permissions to modify database conne…
CVE-2022-47879High7.52023-05-12A Remote Code Execution (RCE) vulnerability in /be/rpc.php in Jedox 2020.2.5 allows remote authenticated users to load arbitrary PHP classes from the 'rtn' dir…
CVE-2022-47878High8.82023-05-02Incorrect input validation for the default-storage-path in the settings page in Jedox 2020.2.5 allows remote, authenticated users to specify the location as We…
CVE-2022-47877Medium5.42023-05-02A Stored cross-site scripting vulnerability in Jedox 2020.2.5 allows remote, authenticated users to inject arbitrary web script or HTML in the Logs page via th…
CVE-2022-47876High8.82023-05-02The integrator in Jedox GmbH Jedox 2020.2.5 allows remote authenticated users to create Jobs to execute arbitrary code via Groovy-scripts.
CVE-2022-47875High8.82023-05-02A Directory Traversal vulnerability in /be/erpc.php in Jedox GmbH Jedox 2020.2.5 allows remote authenticated users to execute arbitrary code.
CVE-2022-47874Medium6.52023-05-02Improper Access Control in /tc/rpc in Jedox GmbH Jedox 2020.2.5 allows remote authenticated users to view details of database connections via class 'com.jedox…
CVE-2007-35812007-07-05The Jedox Palo 1.5 client transmits the password in cleartext, which might allow remote attackers to obtain the password by sniffing the network, as demonstrat…