Export limit exceeded: 425860 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Results 4

Export CSV
CVE-2021-38697

SoftVibe SARABAN for INFOMA 1.1 allows Unauthenticated unrestricted File Upload, that allows attackers to upload files with any file extension which can lead to arbitrary code execution.

CVSS 3.1 · 9.8 Critical EPSS 2.8% KEV · Not listed
Vendors
Products
CVE-2021-38696

SoftVibe SARABAN for INFOMA 1.1 has Incorrect Access Control vulnerability, that allows attackers to access signature files on the application without any authentication.

CVSS 3.1 · 7.5 High EPSS 1.7% KEV · Not listed
Vendors
Products
CVE-2021-38695

SoftVibe SARABAN for INFOMA 1.1 is vulnerable to stored cross-site scripting (XSS) that allows users to store scripts in certain fields (e.g. subject, description) of the document form.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Products