Smartclient - vulnerabilities (CVEs)

4 CVEs in 1 products, 0 in the last 30 days, newest from 2020-02-23.

Products

CVE-2020-9353 - CVSS 7.5 (high), 2020-02-23: An issue was discovered in SmartClient 12.0. The Remote Procedure Call (RPC) loadFile provided by the console functionality on the…
CVE-2020-9352 - CVSS 9.8 (critical), 2020-02-23: An issue was discovered in SmartClient 12.0. Unauthenticated exploitation of blind XXE can occur in the downloadWSDL feature by sending a POST request to…
CVE-2020-9351 - CVSS 5.3 (medium), 2020-02-23: An issue was discovered in SmartClient 12.0. If an unauthenticated attacker makes a POST request to /tools/developerConsoleOperations.jsp or…
CVE-2020-9354 - CVSS 7.5 (high), 2020-02-23: An issue was discovered in SmartClient 12.0. The Remote Procedure Call (RPC) saveFile provided by the console functionality on the…