deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-1617
Published: 2021-07-22
Description: Multiple vulnerabilities in the web-based management interface of Cisco Intersight Virtual Appliance could allow an authenticated, remote attacker to conduct a path traversal or command injection attack on an affected system. These vulnerabilities are due to insufficient input validation. An attacker could exploit these vulnerabilities by using the web-based management interface to do one or both of the following: Execute a command using crafted input Upload a file that has been altered using path traversal techniques A successful exploit could allow the attacker to read and write arbitrary files or execute arbitrary commands as root on an affected system. For more information about these vulnerabilities, see the Details section of this advisory.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-36, CWE-22
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ucsi2-dtcinj-yH5U4RSx; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ucsi2-dtcinj-yH5U4RSx
CVE: CVE-2021-1618
Published: 2021-07-22
Description: Multiple vulnerabilities in the web-based management interface of Cisco Intersight Virtual Appliance could allow an authenticated, remote attacker to conduct a path traversal or command injection attack on an affected system. These vulnerabilities are due to insufficient input validation. An attacker could exploit these vulnerabilities by using the web-based management interface to do one or both of the following: Execute a command using crafted input Upload a file that has been altered using path traversal techniques A successful exploit could allow the attacker to read and write arbitrary files or execute arbitrary commands as root on an affected system. For more information about these vulnerabilities, see the Details section of this advisory.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-36, CWE-78
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ucsi2-dtcinj-yH5U4RSx; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ucsi2-dtcinj-yH5U4RSx
CVE: CVE-2021-23897
Published: 2021-07-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability. However, the number was once accidentally misused to refer to the vulnerability that has the proper number of CVE-2021-31830. Notes: none
CVE: CVE-2021-26762
Published: 2021-07-22
Description: SQL injection vulnerability in PHPGurukul Student Record System 4.0 allows remote attackers to execute arbitrary SQL statements, via the cid parameter to edit-course.php.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://phpgurukul.com/; https://phpgurukul.com/wp-content/uploads/2019/05/schoolmanagement.zip; https://www.exploit-db.com/exploits/49513
CVE: CVE-2021-26764
Published: 2021-07-22
Description: SQL injection vulnerability in PHPGurukul Student Record System v 4.0 allows remote attackers to execute arbitrary SQL statements, via the id parameter to edit-std.php.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://github.com/BigTiger2020/Student-Record-System-/blob/main/README.md; https://packetstormsecurity.com/files/161237/Student-Record-System-4.0-SQL-Injection.html; https://phpgurukul.com/
CVE: CVE-2021-26765
Published: 2021-07-22
Description: SQL injection vulnerability in PHPGurukul Student Record System 4.0 allows remote attackers to execute arbitrary SQL statements, via the sid parameter to edit-sub.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/BigTiger2020/Student-Record-System-/blob/main/README.md; https://packetstormsecurity.com/files/161237/Student-Record-System-4.0-SQL-Injection.html; https://phpgurukul.com/
CVE: CVE-2021-34700
Published: 2021-07-22
Description: A vulnerability in the CLI interface of Cisco SD-WAN vManage Software could allow an authenticated, local attacker to read arbitrary files on the underlying file system of an affected system. This vulnerability exists because access to sensitive information on an affected system is not sufficiently controlled. An attacker could exploit this vulnerability by gaining unauthorized access to sensitive information on an affected system. A successful exploit could allow the attacker to create forged authentication requests and gain unauthorized access to the web UI of an affected system.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-522, CWE-522
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-vmanage-infdis-LggOP9sE; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-vmanage-infdis-LggOP9sE
CVE: CVE-2020-5316
Published: 2021-07-22
Description: Dell SupportAssist for Business PCs versions 2.0, 2.0.1, 2.0.2, 2.1, 2.1.1, 2.1.2, 2.1.3 and Dell SupportAssist for Home PCs version 2.0, 2.0.1, 2.0.2, 2.1, 2.1.1, 2.1.2, 2.1.3, 2.2, 2.2.1, 2.2.2, 2.2.3, 3.0, 3.0.1, 3.0.2, 3.1, 3.2, 3.2.1, 3.2.2, 3.3, 3.3.1, 3.3.2, 3.3.3, 3.4 contain an uncontrolled search path vulnerability. A locally authenticated low privileged user could exploit this vulnerability to cause the loading of arbitrary DLLs by the SupportAssist binaries, resulting in the privileged execution of arbitrary code.
CVSS Score: 7.8 (HIGH)
CWE: CWE-427, CWE-427
References: http://www.dell.com/support/article/SLN320101; http://www.dell.com/support/article/SLN320101
CVE: CVE-2020-5370
Published: 2021-07-22
Description: Dell EMC OpenManage Enterprise (OME) versions prior to 3.4 contain an arbitrary file overwrite vulnerability. A remote authenticated malicious user with high privileges could potentially exploit this vulnerability to overwrite arbitrary files via directory traversal sequences using a crafted tar file to inject malicious RPMs which may cause a denial of service or perform unauthorized actions.
CVSS Score: 7.9 (HIGH)
CWE: CWE-22, CWE-22
References: https://www.dell.com/support/kbdoc/en-us/000130360/dsa-2020-153-dell-emc-openmanage-enterprise-tar-file-extraction-vulnerability; https://www.dell.com/support/kbdoc/en-us/000130360/dsa-2020-153-dell-emc-openmanage-enterprise-tar-file-extraction-vulnerability
CVE: CVE-2021-26227
Published: 2021-07-22
Description: Cross-site scripting (XSS) vulnerability in SourceCodester CASAP Automated Enrollment System v 1.0 allows remote attackers to inject arbitrary web script or HTML via the student information parameters to edit_stud.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/BigTiger2020/CASAP-Automated-Enrollment-System/blob/main/CASAP-Automated-Enrollment-System-4.md; https://github.com/BigTiger2020/CASAP-Automated-Enrollment-System/blob/main/CASAP-Automated-Enrollment-System-4.md
CVE: CVE-2021-26228
Published: 2021-07-22
Description: SQL injection vulnerability in SourceCodester CASAP Automated Enrollment System v 1.0 allows remote attackers to execute arbitrary SQL statements, via the id parameter to edit_class1.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/BigTiger2020/CASAP-Automated-Enrollment-System/blob/main/README.md; https://github.com/BigTiger2020/CASAP-Automated-Enrollment-System/blob/main/README.md
CVE: CVE-2021-26229
Published: 2021-07-22
Description: SQL injection vulnerability in SourceCodester CASAP Automated Enrollment System v 1.0 allows remote attackers to execute arbitrary SQL statements, via the id parameter to edit_stud.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/BigTiger2020/CASAP-Automated-Enrollment-System/blob/main/CASAP-Automated-Enrollment-System-1.md; https://github.com/BigTiger2020/CASAP-Automated-Enrollment-System/blob/main/CASAP-Automated-Enrollment-System-1.md
CVE: CVE-2021-26230
Published: 2021-07-22
Description: Cross-site scripting (XSS) vulnerability in SourceCodester CASAP Automated Enrollment System v 1.0 allows remote attackers to inject arbitrary web script or HTML via the user information to save_user.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/BigTiger2020/CASAP-Automated-Enrollment-System/blob/main/CASAP-Automated-Enrollment-System-5.md; https://github.com/BigTiger2020/CASAP-Automated-Enrollment-System/blob/main/CASAP-Automated-Enrollment-System-5.md
CVE: CVE-2021-26231
Published: 2021-07-22
Description: SQL injection vulnerability in SourceCodester Fantastic Blog CMS v 1.0 allows remote attackers to execute arbitrary SQL statements, via the id parameter to category.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/BigTiger2020/Fantastic-Blog-CMS-/blob/main/README.md; https://github.com/BigTiger2020/Fantastic-Blog-CMS-/blob/main/README.md
CVE: CVE-2021-26232
Published: 2021-07-22
Description: SQL injection vulnerability in SourceCodester Simple College Website v 1.0 allows remote attackers to execute arbitrary SQL statements via the id parameter to news.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/BigTiger2020/Simple-College-Website/blob/main/README.md; https://github.com/BigTiger2020/Simple-College-Website/blob/main/README.md
CVE: CVE-2021-26698
Published: 2021-07-22
Description: OX App Suite before 7.10.3-rev32 and 7.10.4 before 7.10.4-rev18 allows XSS via a code snippet (user-generated content) when a sharing link is created and the dl parameter is used.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/163527/OX-App-Suite-OX-Guard-OX-Documents-SSRF-Cross-Site-Scripting.html; http://seclists.org/fulldisclosure/2021/Jul/33; http://seclists.org/fulldisclosure/2021/Jul/33
CVE: CVE-2021-26699
Published: 2021-07-22
Description: OX App Suite before 7.10.3-rev4 and 7.10.4 before 7.10.4-rev4 allows SSRF via a shared SVG document that is mishandled by the imageconverter component when the .png extension is used.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-918
References: http://packetstormsecurity.com/files/163527/OX-App-Suite-OX-Guard-OX-Documents-SSRF-Cross-Site-Scripting.html; http://seclists.org/fulldisclosure/2021/Jul/33; https://seclists.org/fulldisclosure/2021/Jul/33
CVE: CVE-2021-29657
Published: 2021-07-22
Description: arch/x86/kvm/svm/nested.c in the Linux kernel before 5.11.12 has a use-after-free in which an AMD KVM guest can bypass access control on host OS MSRs when there are nested guests, aka CID-a58d9166a756. This occurs because of a TOCTOU race condition associated with a VMCB12 double fetch in nested_svm_vmrun.
CVSS Score: 7.4 (HIGH)
CWE: CWE-367, CWE-416
References: http://packetstormsecurity.com/files/163324/KVM-nested_svm_vmrun-Double-Fetch.html; https://bugs.chromium.org/p/project-zero/issues/detail?id=2177; https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.11.12
CVE: CVE-2021-33478
Published: 2021-07-22
Description: The TrustZone implementation in certain Broadcom MediaxChange firmware could allow an unauthenticated, physically proximate attacker to achieve arbitrary code execution in the TrustZone Trusted Execution Environment (TEE) of an affected device. This, for example, affects certain Cisco IP Phone and Wireless IP Phone products before 2021-07-07. Exploitation is possible only when the attacker can disassemble the device in order to control the voltage/current for chip pins.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-brcm-mxc-jul2021-26LqUZUh; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-brcm-mxc-jul2021-26LqUZUh
CVE: CVE-2021-37402
Published: 2021-07-22
Description: OX App Suite before 7.10.3-rev32 and 7.10.4 before 7.10.4-rev18 allows XSS via binary data that is mishandled when the legacy dataretrieval endpoint has been enabled.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://seclists.org/fulldisclosure/2021/Jul/33; https://www.open-xchange.com; http://seclists.org/fulldisclosure/2021/Jul/33
CVE: CVE-2021-37403
Published: 2021-07-22
Description: OX App Suite before 7.10.3-rev32 and 7.10.4 before 7.10.4-rev18 allows XSS via a code snippet (user-generated content) when a sharing link is created and an App Loader relative URL is used.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://seclists.org/fulldisclosure/2021/Jul/33; https://www.open-xchange.com; http://seclists.org/fulldisclosure/2021/Jul/33
CVE: CVE-2015-2098
Published: 2021-07-22
Description: Multiple stack-based buffer overflows in WebGate eDVR Manager allow remote attackers to execute arbitrary code via unspecified vectors to the (1) Connect, (2) ConnectEx, or (3) ConnectEx2 function in the WESPEvent.WESPEventCtrl.1 control; (4) AudioOnlySiteChannel function in the WESPPlayback.WESPPlaybackCtrl.1 control; (5) Connect or (6) ConnectEx function in the WESPPTZ.WESPPTZCtrl.1 control; (7) SiteChannel property in the WESPPlayback.WESPPlaybackCtrl.1 control; (8) SiteName property in the WESPPlayback.WESPPlaybackCtrl.1 control; or (9) OpenDVrSSite function in the WESPPTZ.WESPPTZCtrl.1 control.
CVSS Score: 8.8 (HIGH)
CWE: CWE-120
References: http://www.zerodayinitiative.com/advisories/ZDI-15-058/; http://www.zerodayinitiative.com/advisories/ZDI-15-060/; http://www.zerodayinitiative.com/advisories/ZDI-15-061/
CVE: CVE-2015-2099
Published: 2021-07-22
Description: Multiple buffer overflows in WebGate Control Center allow remote attackers to execute arbitrary code via unspecified vectors to the (1) GetRecFileInfo function in the FileConverter.FileConverterCtrl.1 control, (2) Login function in the LoginContoller.LoginControllerCtrl.1 control, or (3) GetThumbnail function in the WESPPlayback.WESPPlaybackCtrl.1 control.
CVSS Score: 8.8 (HIGH)
CWE: CWE-120
References: http://www.zerodayinitiative.com/advisories/ZDI-15-055/; http://www.zerodayinitiative.com/advisories/ZDI-15-056/; http://www.zerodayinitiative.com/advisories/ZDI-15-063/
CVE: CVE-2015-2100
Published: 2021-07-22
Description: Multiple stack-based buffer overflows in WebGate eDVR Manager and Control Center allow remote attackers to execute arbitrary code via unspecified vectors to the (1) TCPDiscover or (2) TCPDiscover2 function in the WESPDiscovery.WESPDiscoveryCtrl.1 control.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: http://www.zerodayinitiative.com/advisories/ZDI-15-057/; http://www.zerodayinitiative.com/advisories/ZDI-15-067/; http://www.zerodayinitiative.com/advisories/ZDI-15-057/
CVE: CVE-2018-11659
Published: 2021-07-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
CVE: CVE-2018-11661
Published: 2021-07-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
CVE: CVE-2020-36033
Published: 2021-07-22
Description: SQL injection vulnerability in SourceCodester Water Billing System 1.0 via the id parameter to edituser.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/TCSWT/Water-Billing-System; https://github.com/TCSWT/Water-Billing-System
CVE: CVE-2021-25197
Published: 2021-07-22
Description: Cross-site scripting (XSS) vulnerability in SourceCodester Content Management System v 1.0 allows remote attackers to inject arbitrary web script or HTML via the search parameter to content_management_system\admin\new_content.php
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/TCSWT/Content-Management-System/blob/main/README.md; https://github.com/TCSWT/Content-Management-System/blob/main/README.md
CVE: CVE-2021-25202
Published: 2021-07-22
Description: SQL injection vulnerability in SourceCodester Sales and Inventory System v 1.0 allows remote attackers to execute arbitrary SQL statements, via the id parameter to \ahira\admin\inventory.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/TCSWT/Sales-and-Inventory-System/blob/main/README.md; https://github.com/TCSWT/Sales-and-Inventory-System/blob/main/README.md
CVE: CVE-2021-26226
Published: 2021-07-22
Description: SQL injection vulnerability in SourceCodester CASAP Automated Enrollment System v 1.0 allows remote attackers to execute arbitrary SQL statements, via the id parameter to edit_user.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/BigTiger2020/CASAP-Automated-Enrollment-System/blob/main/CASAP-Automated-Enrollment-System-2.md; https://github.com/BigTiger2020/CASAP-Automated-Enrollment-System/blob/main/CASAP-Automated-Enrollment-System-2.md
CVE: CVE-2021-33032
Published: 2021-07-22
Description: A Remote Code Execution (RCE) vulnerability in the WebUI component of the eQ-3 HomeMatic CCU2 firmware up to and including version 2.57.5 and CCU3 firmware up to and including version 3.57.5 allows remote unauthenticated attackers to execute system commands as root via a simple HTTP request.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-78
References: https://novag.github.io/posts/homematic-unauthenticated-remote-code-execution/; https://www.eq-3.de/downloads/software/HM-CCU2-Firmware_Updates/HM-CCU-2.59.7/HM-CCU2-Changelog.2.59.7.pdf; https://www.eq-3.de/downloads/software/firmware/ccu3-firmware/CCU3-Changelog.3.59.6.pdf
CVE: CVE-2021-35063
Published: 2021-07-22
Description: Suricata before 5.0.7 and 6.x before 6.0.3 has a "critical evasion."
CVSS Score: 7.5 (HIGH)
References: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=990835; https://bugzilla.redhat.com/show_bug.cgi?id=1980453; https://forum.suricata.io/t/suricata-6-0-3-and-5-0-7-released/1489
CVE: CVE-2021-35464
Published: 2021-07-22
Description: ForgeRock AM server before 7.0 has a Java deserialization vulnerability in the jato.pageSession parameter on multiple pages. The exploitation does not require authentication, and remote code execution can be triggered by sending a single crafted /ccversion/* request to the server. The vulnerability exists due to the usage of Sun ONE Application Framework (JATO) found in versions of Java 8 or earlier
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502, CWE-502
References: http://packetstormsecurity.com/files/163486/ForgeRock-OpenAM-Jato-Java-Deserialization.html; http://packetstormsecurity.com/files/163525/ForgeRock-Access-Manager-OpenAM-14.6.3-Remote-Code-Execution.html; https://backstage.forgerock.com/knowledge/kb/article/a47894244
CVE: CVE-2021-35942
Published: 2021-07-22
Description: The wordexp function in the GNU C Library (aka glibc) through 2.33 may crash or read arbitrary memory in parse_param (in posix/wordexp.c) when called with an untrusted, crafted pattern, potentially resulting in a denial of service or disclosure of information. This occurs because atoi was used but strtoul should have been used to ensure correct calculations.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-190, CWE-704
References: https://lists.debian.org/debian-lts-announce/2022/10/msg00021.html; https://security.gentoo.org/glsa/202208-24; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2021-36222
Published: 2021-07-22
Description: ec_verify in kdc/kdc_preauth_ec.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.18.4 and 1.19.x before 1.19.2 allows remote attackers to cause a NULL pointer dereference and daemon crash. This occurs because a return value is not properly managed in a certain situation.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://github.com/krb5/krb5/commit/fc98f520caefff2e5ee9a0026fdf5109944b3562; https://github.com/krb5/krb5/releases; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2018-11662
Published: 2021-07-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
CVE: CVE-2018-11663
Published: 2021-07-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
CVE: CVE-2018-11664
Published: 2021-07-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
CVE: CVE-2018-11665
Published: 2021-07-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
CVE: CVE-2018-11666
Published: 2021-07-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
CVE: CVE-2018-11668
Published: 2021-07-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
CVE: CVE-2018-11669
Published: 2021-07-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
CVE: CVE-2020-7387
Published: 2021-07-22
Description: Sage X3 Installation Pathname Disclosure. A specially crafted packet can elicit a response from the AdxDSrv.exe component that reveals the installation directory of the product. Note that this vulnerability can be combined with CVE-2020-7388 to achieve full RCE. This issue was fixed in AdxAdmin 93.2.53, which ships with updates for on-premises versions of Sage X3 Version 9 (components shipped with Syracuse 9.22.7.2 and later), Sage X3 HR & Payroll Version 9 (those components that ship with Syracuse 9.24.1.3), Version 11 (components shipped with Syracuse 11.25.2.6 and later), and Version 12 (components shipped with Syracuse 12.10.2.8 and later) of Sage X3. Other on-premises versions of Sage X3 are unsupported by the vendor.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://rapid7.com/blog/post/2021/07/07/sage-x3-multiple-vulnerabilities-fixed; https://www.sagecity.com/gb/sage-x3-uk/f/sage-x3-uk-announcements-news-and-alerts/147993/sage-x3-latest-patches; https://www.rapid7.com/blog/post/2021/07/07/cve-2020-7387-7390-multiple-sage-x3-vulnerabilities/
CVE: CVE-2020-7388
Published: 2021-07-22
Description: Sage X3 Unauthenticated Remote Command Execution (RCE) as SYSTEM in AdxDSrv.exe component. By editing the client side authentication request, an attacker can bypass credential validation. While exploiting this does require knowledge of the installation path, that information can be learned by exploiting CVE-2020-7387. This issue was fixed in AdxAdmin 93.2.53, which ships with updates for on-premises versions of Sage X3 including Version 9 (components shipped with Syracuse 9.22.7.2 and later), Sage X3 HR & Payroll Version 9 (those components that ship with Syracuse 9.24.1.3), Version 11 (components shipped with Syracuse 11.25.2.6 and later), and Version 12 (components shipped with Syracuse 12.10.2.8 and later) of Sage X3. Other on-premises versions of Sage X3 are unsupported by the vendor.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-290, CWE-290
References: https://rapid7.com/blog/post/2021/07/07/sage-x3-multiple-vulnerabilities-fixed; https://www.sagecity.com/gb/sage-x3-uk/f/sage-x3-uk-announcements-news-and-alerts/147993/sage-x3-latest-patches; https://www.rapid7.com/blog/post/2021/07/07/cve-2020-7387-7390-multiple-sage-x3-vulnerabilities/
CVE: CVE-2020-7389
Published: 2021-07-22
Description: Sage X3 System CHAINE Variable Script Command Injection. An authenticated user with developer access can pass OS commands via this variable used by the web application. Note, this developer configuration should not be deployed in production.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-306, CWE-78
References: https://rapid7.com/blog/post/2021/07/07/sage-x3-multiple-vulnerabilities-fixed; https://www.rapid7.com/blog/post/2021/07/07/cve-2020-7387-7390-multiple-sage-x3-vulnerabilities/; https://rapid7.com/blog/post/2021/07/07/sage-x3-multiple-vulnerabilities-fixed