Cipplanner - vulnerabilities (CVEs)

18 CVEs in 1 products, 0 in the last 30 days, newest from 2026-02-11.

Products

Cipace - 18 CVEs

Newest CVEs of Cipplanner

CVE-2024-50619 - CVSS 8.8 (high), 2026-02-11: Vulnerabilities in the My Account and User Management components in CIPPlanner CIPAce before 9.17 allows attackers to escalate their access levels. A…
CVE-2024-50617 - CVSS 7.5 (high), 2026-02-11: Vulnerabilities in the File Download and Get File handler components in CIPPlanner CIPAce before 9.17 allow attackers to download unauthorized files. An…
CVE-2024-50620 - CVSS 8.8 (high), 2026-02-11: Unrestricted Upload of File with Dangerous Type vulnerabilities exist in the rich text editor and document manage components in CIPPlanner CIPAce before 9.17.…
CVE-2024-50618 - CVSS 4.3 (medium), 2026-02-11: A Use of Single-factor Authentication vulnerability in the Authentication component of CIPPlanner CIPAce before 9.17 allows attackers to bypass a protection…
CVE-2020-11586 - CVSS 9.8 (critical), 2020-04-06: An XXE issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801. An unauthenticated attacker can make an API request that contains malicious XML DTD data.
CVE-2020-11587 - CVSS 7.5 (high), 2020-04-06: An issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801. An unauthenticated attacker can make an API request and get the content of ETL Processes…
CVE-2020-11597 - CVSS 9.8 (critical), 2020-04-06: An issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801. An unauthenticated attacker can make an HTTP POST request and inject SQL statements in the…
CVE-2020-11590 - CVSS 5.3 (medium), 2020-04-06: An issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801. An unauthenticated attacker can make an HTTP GET request to HealthPage.aspx and obtain the…
CVE-2020-11593 - CVSS 7.5 (high), 2020-04-06: An issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801. An unauthenticated attacker can make an HTTP POST request with injected HTML data that is…
CVE-2020-11596 - CVSS 7.5 (high), 2020-04-06: A Directory Traversal issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801. An unauthenticated attacker can make HTTP GET requests to a certain URL…
CVE-2020-11599 - CVSS 7.5 (high), 2020-04-06: An issue was discovered in CIPPlanner CIPAce 6.80 Build 2016031401. GetDistributedPOP3 allows attackers to obtain the username and password of the SMTP user.
CVE-2020-11589 - CVSS 7.5 (high), 2020-04-06: An Insecure Direct Object Reference issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801. An unauthenticated attacker can make a GET request to a…
CVE-2020-11592 - CVSS 7.5 (high), 2020-04-06: An issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801. An unauthenticated attacker can make an API request and get the columns of a specific table…
CVE-2020-11595 - CVSS 7.5 (high), 2020-04-06: An issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801. An unauthenticated attacker can make an API request and obtain the upload folder path that…
CVE-2020-11598 - CVSS 9.8 (critical), 2020-04-06: An issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801. Upload.ashx allows remote attackers to execute arbitrary code by uploading and executing an…
CVE-2020-11591 - CVSS 5.3 (medium), 2020-04-06: An issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801. An unauthenticated attacker can make an API request and obtain the full application path…
CVE-2020-11594 - CVSS 7.5 (high), 2020-04-06: An issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801. An unauthenticated attacker can make an API request that causes a stack error to be shown…
CVE-2020-11588 - CVSS 5.3 (medium), 2020-04-06: An issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801. An unauthenticated attacker can make an HTTP GET request to two files that contain customer…