Stimulsoft

9 CVEs across 6 Stimulsoft products. Browse Stimulsoft vulnerabilities, severities, and proof-of-concept exploits.

Stimulsoft products with known CVEs

ProductCVEs
Designer4
Reports2
Dashboard.js1
Dashboards.js1
Dashboards.php1
Viewer1
Stimulsoft CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2024-24398Critical9.82024-02-06Directory Traversal vulnerability in Stimulsoft GmbH Stimulsoft Dashboard.JS before v.2024.1.2 allows a remote attacker to execute arbitrary code via a crafted…
CVE-2024-24396Medium6.12024-02-05Cross Site Scripting vulnerability in Stimulsoft GmbH Stimulsoft Dashboard.JS before v.2024.1.2 allows a remote attacker to execute arbitrary code via a crafte…
CVE-2024-24397Medium5.42024-02-05Cross Site Scripting vulnerability in Stimulsoft GmbH Stimulsoft Dashboard.JS before v.2024.1.2 allows a remote attacker to execute arbitrary code via a crafte…
CVE-2023-25260High7.52023-03-28Stimulsoft Designer (Web) 2023.1.3 is vulnerable to Local File Inclusion.
CVE-2023-25262High7.52023-03-28Stimulsoft GmbH Stimulsoft Designer (Web) 2023.1.3 is vulnerable to Server Side Request Forgery (SSRF). TThe Reporting Designer (Web) offers the possibility to…
CVE-2023-25263Medium5.52023-03-27In Stimulsoft Designer (Desktop) 2023.1.5, and 2023.1.4, once an attacker decompiles the Stimulsoft.report.dll the attacker is able to decrypt any connectionst…
CVE-2023-25261Critical9.82023-03-27Certain Stimulsoft GmbH products are affected by: Remote Code Execution. This affects Stimulsoft Designer (Desktop) 2023.1.4 and Stimulsoft Designer (Web) 2023…
CVE-2021-42777Critical9.82022-10-29Stimulsoft (aka Stimulsoft Reports) 2013.1.1600.0, when Compilation Mode is used, allows an attacker to execute arbitrary C# code on any machine that renders a…
CVE-2020-15865Critical9.82020-08-18A Remote Code Execution vulnerability in Stimulsoft (aka Stimulsoft Reports) 2013.1.1600.0 allows an attacker to encode C# scripts as base-64 in the report XML…