Search vulnerabilities

Results 5

Export CSV
CVE-2014-3702

eDeploy: Path traversal in the session parameter

Directory traversal vulnerability in eNovance eDeploy allows remote attackers to create arbitrary directories and files and consequently cause a denial of service (resource consumption) via a .. (dot dot) the session parameter.

CVSS 3.0 · 9.1 Critical EPSS 1.9% KEV · Not listed
Vendors
Products
CVE-2014-8174

enovance: use of HTTP to download sensitive files

eDeploy makes it easier for remote attackers to execute arbitrary code by leveraging use of HTTP to download files.

CVSS 3.0 · 9.8 Critical EPSS 3.0% KEV · Not listed
Vendors
Products
CVE-2014-3700

eDeploy: Remote code execution due to eval() of untrusted data

eDeploy through at least 2014-10-14 has remote code execution due to eval() of untrusted data

CVSS 3.1 · 9.8 Critical EPSS 2.8% KEV · Not listed
Vendors