CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

24 matches found

NVD•added 2021/11/22 9:15 a.m.•53 views

CVE-2021-38146

The File Download API in Wipro Holmes Orchestrator 20.4.1 20.4.102112020 allows remote attackers to read arbitrary files via absolute path traversal in the SearchString JSON field in /home/download POST data...

7.5CVSS0.11733EPSS

SaveExploits3References2

OSV•added 2021/11/22 9:15 a.m.•16 views

CVE-2021-38146

7.5CVSS6AI score0.11733EPSS

SaveExploits3References2

Cvelist•added 2021/11/22 8:34 a.m.•53 views

CVE-2021-38146

7.7AI score0.11733EPSS

SaveExploits3References2

CVE•added 2021/11/22 8:34 a.m.•78 views

CVE-2021-38146

CVE-2021-38146 affects Wipro Holmes Orchestrator 20.4.1. The vulnerability is an unauthenticated, absolute path traversal in the File Download API (POST /home/download, SearchString parameter) that allows reading arbitrary server files. CVSS v3.1 base score 7.5 (HIGH) with network access, low att...

7.5CVSS7.4AI score0.11733EPSS

SaveExploits3References2Affected Software1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by