SoftVibe SARABAN for INFOMA 1.1 allows Unauthenticated unrestricted File Upload, that allows attackers to upload files with any file extension which can lead to arbitrary code execution.
Export limit exceeded: 425860 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search vulnerabilities
CVE-2021-38697
CVSS 3.1 · 9.8 Critical
EPSS 2.8%
KEV · Not listed
Vendors
Products
CVE-2021-38696
SoftVibe SARABAN for INFOMA 1.1 has Incorrect Access Control vulnerability, that allows attackers to access signature files on the application without any authentication.
CVSS 3.1 · 7.5 High
EPSS 1.7%
KEV · Not listed
Vendors
Products
CVE-2021-38695
SoftVibe SARABAN for INFOMA 1.1 is vulnerable to stored cross-site scripting (XSS) that allows users to store scripts in certain fields (e.g. subject, description) of the document form.
CVSS 3.1 · 5.4 Medium
EPSS < 1%
KEV · Not listed
Vendors
Products
CVE-2021-38694
SoftVibe SARABAN for INFOMA 1.1 allows SQL Injection.
CVSS 3.1 · 7.5 High
EPSS 1.5%
KEV · Not listed
Vendors
Products
Page 1 of 1.