Ruvar: Security Vulnerabilities
RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the id parameter at /AddressBook/address_public_new.aspx.
CVSS Score
9.4
EPSS Score
0.001
Published
2024-05-07
RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the file_id parameter at /CorporateCulture/kaizen_download.aspx.
CVSS Score
7.8
EPSS Score
0.001
Published
2024-05-07
RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the template_id parameter at /SysManage/wf_template_child_field_list.aspx.
CVSS Score
9.4
EPSS Score
0.001
Published
2024-05-07
RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the email_attach_id parameter at /LHMail/AttachDown.aspx.
CVSS Score
9.4
EPSS Score
0.001
Published
2024-05-07
RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the id parameter at /bulletin/bulletin_template_show.aspx.
CVSS Score
9.8
EPSS Score
0.001
Published
2024-05-07
RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the attach_id parameter at /Bulletin/AttachDownLoad.aspx.
CVSS Score
8.1
EPSS Score
0.001
Published
2024-05-07
Page 3