Cipace Security Vulnerabilities and Issues — Cipace CVE List

Lucene search

CipplannerCipace

3 matches found

CVE•added 2020/04/06 11:15 p.m.•58 views

CVE-2020-11586

An XXE issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801. An unauthenticated attacker can make an API request that contains malicious XML DTD data.

9.8CVSS9.4AI score0.01914EPSS

CVE•added 2020/04/06 10:15 p.m.•58 views

CVE-2020-11597

An issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801. An unauthenticated attacker can make an HTTP POST request and inject SQL statements in the user context of the db owner.

9.8CVSS9.6AI score0.02424EPSS

CVE•added 2020/04/06 10:15 p.m.•56 views

CVE-2020-11598

An issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801. Upload.ashx allows remote attackers to execute arbitrary code by uploading and executing an ASHX file.

9.8CVSS9.6AI score0.03189EPSS