Softvibe Saraban
4 CVEs affecting Softvibe Saraban. Latest disclosed: 2022-01-18. Critical: 1, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-38697 | Critical | 9.8 | 2022-01-18 | SoftVibe SARABAN for INFOMA 1.1 allows Unauthenticated unrestricted File Upload, that allows attackers to upload files with any file extension which can lead t… |
CVE-2021-38696 | High | 7.5 | 2022-01-18 | SoftVibe SARABAN for INFOMA 1.1 has Incorrect Access Control vulnerability, that allows attackers to access signature files on the application without any auth… |
CVE-2021-38694 | High | 7.5 | 2022-01-18 | SoftVibe SARABAN for INFOMA 1.1 allows SQL Injection. |
CVE-2021-38695 | Medium | 5.4 | 2022-01-18 | SoftVibe SARABAN for INFOMA 1.1 is vulnerable to stored cross-site scripting (XSS) that allows users to store scripts in certain fields (e.g. subject, descript… |