16 matches found
CVE-2023-7305
SmartBI V8, V9, and V10 contain an unrestricted file upload vulnerability via the RMIServlet request handling logic. Under certain configurations or usage patterns, attackers can send specially crafted requests that cause the application to perform sensitive operations or execute arbitrary code o...
CVE-2023-7305
SmartBI V8, V9, and V10 contain an unrestricted file upload vulnerability via the RMIServlet request handling logic. Under certain configurations or usage patterns, attackers can send specially crafted requests that cause the application to perform sensitive operations or execute arbitrary code o...
CVE-2023-7305 SmartBI RMIServlet Unrestricted File Upload RCE
SmartBI V8, V9, and V10 contain an unrestricted file upload vulnerability via the RMIServlet request handling logic. Under certain configurations or usage patterns, attackers can send specially crafted requests that cause the application to perform sensitive operations or execute arbitrary code o...
CVE-2023-7305
CVE-2023-7305 affects SmartBI V8, V9 and V10. The vulnerability is an unrestricted file upload via the RMIServlet request handling logic, enabling attackers to trigger sensitive operations or arbitrary code execution on the host under certain configurations. The vendor released a fix in July 2023...
CVE-2023-7305 SmartBI RMIServlet Unrestricted File Upload RCE
SmartBI V8, V9, and V10 contain an unrestricted file upload vulnerability via the RMIServlet request handling logic. Under certain configurations or usage patterns, attackers can send specially crafted requests that cause the application to perform sensitive operations or execute arbitrary code o...
SmartBI 安全漏洞
SmartBI is a business intelligence software from China-based SmartBI. A security vulnerability exists in SmartBI versions V8, V9, and V10 that stems from an unrestricted file upload in the RMIServlet request processing logic, which could lead to the execution of arbitrary code...
PT-2025-42219
SmartBI V8, V9, and V10 contain an unrestricted file upload vulnerability via the RMIServlet request handling logic. Under certain configurations or usage patterns, attackers can send specially crafted requests that cause the application to perform sensitive operations or execute arbitrary code o...
VulnCheck KEV: CVE-2023-7305
SmartBI V8, V9, and V10 contain an unrestricted file upload vulnerability via the RMIServlet request handling logic. Under certain configurations or usage patterns, attackers can send specially crafted requests that cause the application to perform sensitive operations or execute arbitrary code o...
Smartbi windowUnloading Authentication Bypass Vulnerability
Smartbi is a one-stop big data analytics platform. An authentication bypass vulnerability exists in Smartbi windowUnloading, which can be exploited by an attacker to obtain system user credentials and execute remote code...
Smartbi setEngineAddress Privilege Bypass Vulnerability
Smartbi is a one-stop big data analytics platform. Smartbi setEngineAddress there is a privilege bypass vulnerability, the vulnerability is due to the setEngineAddress interface is not authorized, unauthorized remote attacker can use the vulnerability to obtain the administrator Token, so as to...
Smartbi Logic Vulnerability
Smartbi is a one-stop big data analytics platform. Smartbi suffers from a logic vulnerability that can be exploited by an attacker to gain server privileges...
XXE Vulnerability in Smartbi
Smartbi offers a full suite of data analysis software that meets the needs of the user. A XXE vulnerability exists in Smartbi, which can be exploited by an attacker to read arbitrary files to obtain sensitive information...
XML External Entity Injection Vulnerability in Smartbi of Guangzhou Sematic Software Co.
Smartbi is a business intelligence BI software. Smartbi by Guangzhou Sematic Software Co. Ltd. suffers from an XML external entity injection vulnerability that can be exploited by an attacker to gain control of the server...
Smartbi's Big Data Analytics-BI Technology Platform Has Information Leakage Vulnerabilities
Ltd. is committed to providing one-stop business intelligence solutions for enterprise customers. There is an information leakage vulnerability in Smartbi Big Data Analytics-BI technology platform. An attacker can exploit the vulnerability to obtain sensitive information...
Smartbi Big Data Analytics Platform of Guangzhou Sematic Software Company Limited Has Logic Flaw Vulnerability
Guangzhou Sematic Software Co., Ltd. is a company dedicated to providing one-stop business intelligence solutions for enterprise customers. A logic flaw vulnerability exists in the Smartbi Big Data Analytics Platform of Guangzhou Sematic Software Limited, which can be exploited by attackers to...
Smartbi has a flawed logic vulnerability
Smartbi is the business intelligence BI and data analytics brand of Guangzhou Sematic Software Co. Smartbi has a logic flaw vulnerability that can be exploited by an attacker to view and modify sensitive system configuration information...