Sandline Centraleyezer
3 CVEs affecting Sandline Centraleyezer. Latest disclosed: 2019-11-18. Critical: 1, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-12271 | Critical | 9.8 | 2019-11-18 | Sandline Centraleyezer (On Premises) allows unrestricted File Upload with a dangerous type, because the feature of adding ".jpg" to any uploaded filename is no… |
CVE-2019-12311 | Medium | 6.1 | 2019-11-18 | Sandline Centraleyezer (On Premises) allows Unrestricted File Upload leading to Stored XSS. An HTML page running a script could be uploaded to the server. When… |
CVE-2019-12299 | Medium | 6.1 | 2019-11-18 | Sandline Centraleyezer (On Premises) allows Stored XSS using HTML entities in the name field of the Category section. |