deltek records

3 published records for vendor deltek.

Researcher profile

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

3 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
64This week	CVE-2019-12314Proof of concept	Deltek Maconomy 2.2.5 is prone to local file inclusion via absolute path traversal in the WS.macx1.W_MCS/ PATH_INFO, as demonstrated by a cgdeltek · maconomy · CWE-22 Pre-auth Path traversal	Critical9.8	—	84.2%	May 24, 2019
39Monitor	CVE-2018-18251No exploit	Deltek Vision 7.x before 7.6 permits the execution of any attacker supplied SQL statement through a custom RPC over HTTP protocol.deltek · vision · CWE-89 pre-auth RCE SQL injection Hard-coded credentials	Critical9.8	—	1.6%	Apr 24, 2019
38Monitor	CVE-2018-20221Proof of concept	Secure/SAService.rem in Deltek Ajera Timesheets 9.10.16 and prior are vulnerable to remote code execution via deserialization of untrusted udeltek · ajera · CWE-502 RCE Deserialization	High8.8	—	10.3%	Mar 21, 2019

CVE-2019-12314
64This week
Deltek Maconomy 2.2.5 is prone to local file inclusion via absolute path traversal in the WS.macx1.W_MCS/ PATH_INFO, as demonstrated by a cg
CriticalCVSS 9.8Proof of conceptEPSS 84%
- Pre-auth
- Path traversal
deltek · maconomyMay 24, 2019
CVE-2018-18251
39Monitor
Deltek Vision 7.x before 7.6 permits the execution of any attacker supplied SQL statement through a custom RPC over HTTP protocol.
CriticalCVSS 9.8No exploitEPSS 2%
deltek · visionApr 24, 2019
CVE-2018-20221
38Monitor
Secure/SAService.rem in Deltek Ajera Timesheets 9.10.16 and prior are vulnerable to remote code execution via deserialization of untrusted u
HighCVSS 8.8Proof of conceptEPSS 10%
- RCE
- Deserialization
deltek · ajeraMar 21, 2019