Filtered by vendor Smartbear Subscriptions
Filtered by product Zephyr Enterprise Subscriptions
Total 4 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2023-22892 1 Smartbear 1 Zephyr Enterprise 2024-11-21 7.5 High
There exists an information disclosure vulnerability in SmartBear Zephyr Enterprise through 7.15.0 that could be exploited by unauthenticated users to read arbitrary files from Zephyr instances.
CVE-2023-22891 1 Smartbear 1 Zephyr Enterprise 2024-11-21 8.1 High
There exists a privilege escalation vulnerability in SmartBear Zephyr Enterprise through 7.15.0 that could be exploited by authorized users to reset passwords for other accounts.
CVE-2023-22890 1 Smartbear 1 Zephyr Enterprise 2024-11-21 7.5 High
SmartBear Zephyr Enterprise through 7.15.0 allows unauthenticated users to upload large files, which could exhaust the local drive space, causing a denial of service condition.
CVE-2023-22889 1 Smartbear 1 Zephyr Enterprise 2024-11-21 9.8 Critical
SmartBear Zephyr Enterprise through 7.15.0 mishandles user-defined input during report generation. This could lead to remote code execution by unauthenticated users.