CVE-2021-38695

CVE-2021-38695 affects SoftVibe SARABAN for INFOMA 1.1. A stored XSS vulnerability is present in the document form, allowing scripts to be stored in fields such as subject and description due to inadequate input handling/output encoding. Public mappings in multiple sources corroborate a cross-sit...

CVE-2021-38697

CVE-2021-38697 affects SoftVibe SARABAN for INFOMA 1.1. The issue is an unauthenticated unrestricted file upload due to insufficient access control/file type validation, allowing uploads of any extension and potentially arbitrary code execution. Several sources corroborate the basic affect and im...

CVE-2021-38694

CVE-2021-38694 affects SoftVibe SARABAN for INFOMA 1.1. The connected documents confirm a SQL Injection vulnerability in SoftVibe SARABAN for INFOMA 1.1, caused by improper input handling in the product’s web/app layer. Impact stated in sources includes potential data disclosure; CVSSv3.1 base sc...

CVE-2021-38696

SoftVibe SARABAN for INFOMA 1.1 is affected by CVE-2021-38696 due to an Incorrect Access Control vulnerability that allows attackers to access signature files without authentication. The issue is described as a lack of proper access enforcement over signed files within the application, leading to...