Vaultize Enterprise File Sharing
8 CVEs affecting Vaultize Enterprise File Sharing. Latest disclosed: 2018-04-25. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-10208 | Medium | 6.1 | 2018-04-25 | An issue was discovered in Vaultize Enterprise File Sharing 17.05.31. There is anonymous reflected XSS on the error page via a /share/error?message= URI. |
CVE-2018-10213 | Medium | 5.4 | 2018-04-25 | An issue was discovered in Vaultize Enterprise File Sharing 17.05.31. There is XSS in invitation mail received from a different user, who can modify the HTML i… |
CVE-2018-10212 | Medium | 5.4 | 2018-04-25 | An issue was discovered in Vaultize Enterprise File Sharing 17.05.31. There is improper authorization leading to creation of folders within another account via… |
CVE-2018-10209 | Medium | 5.4 | 2018-04-25 | An issue was discovered in Vaultize Enterprise File Sharing 17.05.31. There is Stored XSS on the file or folder download pop-up via a crafted file or folder na… |
CVE-2018-10206 | Medium | 5.4 | 2018-04-25 | An issue was discovered in Vaultize Enterprise File Sharing 17.05.31. There is Stored XSS via the optional message field of a file request. |
CVE-2018-10211 | Medium | 5.3 | 2018-04-25 | An issue was discovered in Vaultize Enterprise File Sharing 17.05.31. There is improper authorization when listing the history of another user via a modified "… |
CVE-2018-10210 | Medium | 5.3 | 2018-04-25 | An issue was discovered in Vaultize Enterprise File Sharing 17.05.31. Enumeration of users is possible through the password-reset feature. |
CVE-2018-10207 | Medium | 5.3 | 2018-04-25 | An issue was discovered in Vaultize Enterprise File Sharing 17.05.31. An attacker can exploit Missing Authorization on the FlexPaperViewer SWF reader, and expo… |