CVE-2022-47075

Smart Office Web 20.28 and earlier versions are affected by CVE-2022-47075 and CVE-2022-47076, both resulting in information disclosure. The impact is unauthenticated data exposure via insecure endpoints: ExportEmployeeDetails.aspx (action parameter) and ExportReportingManager.aspx for CVE-2022-4...

CVE-2022-47076

CVE-2022-47076 affects Smart Office Web 20.28 and earlier. The issue allows attackers to view sensitive information via the DisplayParallelLogData.aspx page, constituting an information disclosure that impacts confidentiality. The CVSS v3.1 base score is 7.5 (HIGH) with NETWORK attack vector, LOW...