CVE-2022-47880

The CVE-2022-47880 vulnerability affects Jedox implementations exposing /be/rpc.php (test connection) and allows remote, authenticated users with permission to modify database connections to disclose cleartext passwords. The issue is demonstrated in Jedox versions such as 2020.2.5 and is also cit...

CVE-2022-47879

Summary: CVE-2022-47879 affects Jedox. A remote authenticated RCE exists in /be/rpc.php (and /be/erpc.php per exploit sources) where an attacker can load arbitrary PHP classes from the rtn directory and execute methods. Affected version: Jedox 2020.2.5 and earlier; vendor notes the issue affects ...