Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

CVE-2021-38697

SoftVibe SARABAN for INFOMA 1.1 allows Unauthenticated unrestricted File Upload, that allows attackers to upload files with any file extension which can lead to arbitrary code execution.

CVSS 3.1 · 9.8 Critical EPSS 2.8% KEV · Not listed
Vendors
Softvibe
Products
Saraban
CVE-2021-38696

SoftVibe SARABAN for INFOMA 1.1 has Incorrect Access Control vulnerability, that allows attackers to access signature files on the application without any authentication.

CVSS 3.1 · 7.5 High EPSS 1.7% KEV · Not listed
Vendors
Softvibe
Products
Saraban
CVE-2021-38695

SoftVibe SARABAN for INFOMA 1.1 is vulnerable to stored cross-site scripting (XSS) that allows users to store scripts in certain fields (e.g. subject, description) of the document form.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Softvibe
Products
Saraban