Vulnerability Details CVE-2022-24252
An unrestricted file upload vulnerability in the FileTransferServlet component of Extensis Portfolio v4.0 allows remote attackers to execute arbitrary code via a crafted file.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.022
EPSS Ranking 80.2%
CVSS Severity
CVSS v3 Score 8.8
CVSS v2 Score 6.5
Products affected by CVE-2022-24252
-
cpe:2.3:a:extensis:portfolio:4.0