Jedox: >> Jedox Cloud Security Vulnerabilities
A Remote Code Execution (RCE) vulnerability in /be/rpc.php in Jedox 2020.2.5 allows remote authenticated users to load arbitrary PHP classes from the 'rtn' directory and execute its methods.
CVSS Score
7.5
EPSS Score
0.051
Published
2023-05-12
An Information disclosure vulnerability in /be/rpc.php in Jedox GmbH Jedox 2020.2.5 allow remote, authenticated users with permissions to modify database connections to disclose a connections' cleartext password via the 'test connection' function.
CVSS Score
5.3
EPSS Score
0.007
Published
2023-05-12