CVE-2022-24251

CVE-2022-24251 concerns Extensis Portfolio v4.0, which has an authenticated unrestricted file upload vulnerability via the Catalog Asset Upload function. In connected sources, an advisory describes that a remote attacker could upload a malicious file and execute it on the server, potentially comp...

CVE-2022-24254: Unrestricted Upload of File with Dangerous Type

An unrestricted file upload vulnerability in the Backup/Restore Archive component of Extensis Portfolio v4.0 allows remote attackers to execute arbitrary code via a crafted ZIP file...

CVE-2022-24252: Unrestricted Upload of File with Dangerous Type

An unrestricted file upload vulnerability in the FileTransferServlet component of Extensis Portfolio v4.0 allows remote attackers to execute arbitrary code via a crafted file...

CVE-2022-24255: Use of Hard-coded Credentials

Extensis Portfolio v4.0 was discovered to contain hardcoded credentials which allows attackers to gain administrator privileges...

CVE-2022-24251: Unrestricted Upload of File with Dangerous Type

Extensis Portfolio v4.0 was discovered to contain an authenticated unrestricted file upload vulnerability via the Catalog Asset Upload function...

PT-2022-16564

Name of the Vulnerable Software and Affected Versions Extensis Portfolio version 4.0 Description The issue is related to an authenticated unrestricted file upload vulnerability. This vulnerability can be exploited via the Catalog Asset Upload function. Recommendations For Extensis Portfolio versi...

PT-2022-16566

Name of the Vulnerable Software and Affected Versions Extensis Portfolio version 4.0 Description The issue is related to an authenticated unrestricted file upload vulnerability. This vulnerability is exploited via the AdminFileTransferServlet component. Recommendations For Extensis Portfolio...

PT-2022-16565

Name of the Vulnerable Software and Affected Versions Extensis Portfolio version 4.0 Description The issue is related to an unrestricted file upload vulnerability in the FileTransferServlet component, allowing remote attackers to execute arbitrary code via a crafted file. Recommendations For...

CVE-2022-24253: Unrestricted Upload of File with Dangerous Type

Extensis Portfolio v4.0 was discovered to contain an authenticated unrestricted file upload vulnerability via the component AdminFileTransferServlet...

PT-2022-16567

Name of the Vulnerable Software and Affected Versions Extensis Portfolio version 4.0 Description The issue allows remote attackers to execute arbitrary code via a crafted ZIP file, exploiting an unrestricted file upload vulnerability in the Backup/Restore Archive component. Recommendations For...

PT-2022-16568

Name of the Vulnerable Software and Affected Versions Extensis Portfolio version 4.0 Description The issue concerns hardcoded credentials in the software, which can be exploited by attackers to gain administrator privileges. Recommendations For Extensis Portfolio version 4.0, consider changing th...

Celartem Extensis Portfolio 信任管理问题漏洞

Celartem Extensis Portfolio is a digital asset management solution from Celartem Japan. A trust management issue vulnerability exists in Celartem Extensis Portfolio versions 3.0.0 through 3.6.3, which stems from the presence of hard-coded credentials in the main portal and administrator portal. A...

Celartem Extensis Portfolio 代码问题漏洞

Celartem Extensis Portfolio is a digital asset management solution from Celartem Japan. A code issue vulnerability exists in Celartem Extensis Portfolio versions 3.0.0 through 3.6.3, which stems from insufficient validation of files during file uploads in the main portal. A remote user can upload...

Celartem Extensis Portfolio 代码问题漏洞

Celartem Extensis Portfolio is a digital asset management solution from Celartem Japan. A code issue vulnerability exists in Celartem Extensis Portfolio versions 3.0.0 through 3.6.3 that stems from insufficient file validation when uploading files. A remote attacker could exploit the vulnerabilit...

Celartem Extensis Portfolio 代码问题漏洞

Celartem Extensis Portfolio is a digital asset management solution from Celartem Japan. A code issue vulnerability exists in Celartem Extensis Portfolio versions 3.0.0 through 3.6.3, which stems from insufficient file validation when uploading files in the administration portal. A remote user can...

Celartem Extensis Portfolio 代码问题漏洞

Celartem Extensis Portfolio is a digital asset management solution from Celartem Japan. A code issue vulnerability exists in Celartem Extensis Portfolio versions 3.0.0 through 3.6.3, which stems from an error in the software's input validation when processing directory traversal sequences in...

extensis.com XSS vulnerability

Open Bug Bounty ID: OBB-554179 Description| Value ---|--- Affected Website:| extensis.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Design/Logic Flaw

netpub/server.np in Extensis Portfolio NetPublish has XSS in the quickfind parameter, aka Open Bug Bounty ID OBB-290447...

CVE-2017-18006

netpub/server.np in Extensis Portfolio NetPublish has XSS in the quickfind parameter, aka Open Bug Bounty ID OBB-290447...

CVE-2017-18006

Extensis Portfolio NetPublishe netpub/server.np is affected by an XSS vulnerability in the quickfind parameter (CVE-2017-18006). The issue is consistently described across multiple sources (NVD, Red Hat, CNVD, CVE List) as a cross-site scripting flaw in the quickfind parameter. The connected doc...