Konzept-Ix Publixone
5 CVEs affecting Konzept-Ix Publixone. Latest disclosed: 2020-10-27. Critical: 2, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-27183 | Critical | 9.8 | 2020-10-27 | A RemoteFunctions endpoint with missing access control in konzept-ix publiXone before 2020.015 allows attackers to disclose sensitive user information, send ar… |
CVE-2020-27179 | Critical | 9.8 | 2020-10-27 | konzept-ix publiXone before 2020.015 allows attackers to take over arbitrary user accounts by crafting password-reset tokens. |
CVE-2020-27180 | High | 7.5 | 2020-10-27 | konzept-ix publiXone before 2020.015 allows attackers to download files by iterating over the IXCopy fileID parameter. |
CVE-2020-27181 | Medium | 6.5 | 2020-10-27 | A hardcoded AES key in CipherUtils.java in the Java applet of konzept-ix publiXone before 2020.015 allows attackers to craft password-reset tokens or decrypt s… |
CVE-2020-27182 | Medium | 6.1 | 2020-10-27 | Multiple cross-site scripting (XSS) vulnerabilities in konzept-ix publiXone before 2020.015 allow remote attackers to inject arbitrary JavaScript or HTML via a… |