PT-2022-16565

Name of the Vulnerable Software and Affected Versions Extensis Portfolio version 4.0 Description The issue is related to an unrestricted file upload vulnerability in the FileTransferServlet component, allowing remote attackers to execute arbitrary code via a crafted file. Recommendations For...

PT-2022-16564

Name of the Vulnerable Software and Affected Versions Extensis Portfolio version 4.0 Description The issue is related to an authenticated unrestricted file upload vulnerability. This vulnerability can be exploited via the Catalog Asset Upload function. Recommendations For Extensis Portfolio versi...