7 matches found
CVE-2024-39334
MENDELSON AS4 before 2024 B376 has a client-side vulnerability when a trading partner provides prepared XML data. When a victim opens the details of this transaction in the client, files can be written to the computer on which the client process is running. The server process is not affected...
CVE-2024-39334
MENDELSON AS4 before 2024 B376 has a client-side vulnerability when a trading partner provides prepared XML data. When a victim opens the details of this transaction in the client, files can be written to the computer on which the client process is running. The server process is not affected...
CVE-2024-39334
MENDELSON AS4 before 2024 B376 has a client-side vulnerability when a trading partner provides prepared XML data. When a victim opens the details of this transaction in the client, files can be written to the computer on which the client process is running. The server process is not affected...
CVE-2024-39334
CVE-2024-39334 affects MENDELSON AS4 prior to 2024 B376. The vulnerability is client-side: when a trading partner provides prepared XML data, opening the transaction details in the client can allow writing files to the client machine (server process is unaffected). The CVSS indicates network acce...
CVE-2024-39334
MENDELSON AS4 before 2024 B376 has a client-side vulnerability when a trading partner provides prepared XML data. When a victim opens the details of this transaction in the client, files can be written to the computer on which the client process is running. The server process is not affected...
MENDELSON AS4 Security Vulnerability
MENDELSON AS4 is an out-of-the-box B2B document exchange solution from MENDELSON. A security vulnerability exists in versions prior to MENDELSON AS4 2024 B376 that stems from the fact that when a trading partner provides prepared XML data, the file can be written to a computer that is running a...
PT-2024-28454 · Mendelson · Mendelson As4
Name of the Vulnerable Software and Affected Versions: MENDELSON AS4 versions prior to 2024 B376 Description: The issue arises when a trading partner provides prepared XML data, exploiting a client-side vulnerability. This allows files to be written to the computer running the client process when...