Iris Webforms (Systematic) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2019-11-12. Vendor: Systematic.

CVEs of Iris Webforms

• CVE-2019-18925 - CVSS 9.8 (critical), 2019-11-12: Systematic IRIS WebForms 5.4 and its functionalities can be accessed and used without any form of authentication.
• CVE-2019-18924 - CVSS 5.3 (medium), 2019-11-12: Systematic IRIS WebForms 5.4 is vulnerable to directory traversal. By manipulating variables that reference files with ../ (and variations), it is possible to…