Xerte records
2 published records for vendor xerte.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Attack profile
All records
2 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
39Monitor | CVE-2021-44664Proof of concept | An Authenticated Remote Code Exection (RCE) vulnerability exists in Xerte through 3.9 in website_code/php/import/fileupload.php by uploadingxerte · xerte · CWE-22 | High8.8 | — | 12.7% | Feb 24, 2022 |
28Monitor | CVE-2021-44665Proof of concept | A Directory Traversal vulnerability exists in the Xerte Project Xerte through 3.10.3 when downloading a project file via download.php.xerte · xerte · CWE-22 | Medium6.5 | — | 7.6% | Feb 24, 2022 |
- CVE-2021-4466439Monitor
An Authenticated Remote Code Exection (RCE) vulnerability exists in Xerte through 3.9 in website_code/php/import/fileupload.php by uploading
HighCVSS 8.8Proof of conceptEPSS 12%xerte · xerteFeb 24, 2022
- CVE-2021-4466528Monitor
A Directory Traversal vulnerability exists in the Xerte Project Xerte through 3.10.3 when downloading a project file via download.php.
MediumCVSS 6.5Proof of conceptEPSS 7%xerte · xerteFeb 24, 2022