Smartclient Smartclient
4 CVEs affecting Smartclient Smartclient. Latest disclosed: 2020-02-23. Critical: 1, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-9352 | Critical | 9.8 | 2020-02-23 | An issue was discovered in SmartClient 12.0. Unauthenticated exploitation of blind XXE can occur in the downloadWSDL feature by sending a POST request to /tool… |
CVE-2020-9354 | High | 7.5 | 2020-02-23 | An issue was discovered in SmartClient 12.0. The Remote Procedure Call (RPC) saveFile provided by the console functionality on the /tools/developerConsoleOpera… |
CVE-2020-9353 | High | 7.5 | 2020-02-23 | An issue was discovered in SmartClient 12.0. The Remote Procedure Call (RPC) loadFile provided by the console functionality on the /tools/developerConsoleOpera… |
CVE-2020-9351 | Medium | 5.3 | 2020-02-23 | An issue was discovered in SmartClient 12.0. If an unauthenticated attacker makes a POST request to /tools/developerConsoleOperations.jsp or /isomorphic/IDACal… |