CVE-2024-50619

< 9.17

Vulnerabilities in the My Account and User Management components in CIPPlanner CIPAce before 9.17 allows attackers to escalate the

8.8HIGH

CVE-2024-50617

< 9.17

Vulnerabilities in the File Download and Get File handler components in CIPPlanner CIPAce before 9.17 allow attackers to download

7.5HIGH

CVE-2024-50620

< 9.17

Unrestricted Upload of File with Dangerous Type vulnerabilities exist in the rich text editor and document manage components in CI

8.8HIGH

CVE-2024-50618

< 9.17

A Use of Single-factor Authentication vulnerability in the Authentication component of CIPPlanner CIPAce before 9.17 allows attack

4.3MEDIUM

CVE-2020-11587

< 9.1

An issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801. An unauthenticated attacker can make an API request and get the

7.5HIGH

CVE-2020-11586

< 9.1

An XXE issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801. An unauthenticated attacker can make an API request that co

9.8CRITICAL

CVE-2020-11599

>= 6.80 and < 9.1

An issue was discovered in CIPPlanner CIPAce 6.80 Build 2016031401. GetDistributedPOP3 allows attackers to obtain the username and

7.5HIGH

CVE-2020-11598

< 9.1

An issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801. Upload.ashx allows remote attackers to execute arbitrary code b

9.8CRITICAL

CVE-2020-11597

< 9.1

An issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801. An unauthenticated attacker can make an HTTP POST request and i

9.8CRITICAL

CVE-2020-11596

< 9.1

A Directory Traversal issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801. An unauthenticated attacker can make HTTP GE

7.5HIGH

CVE-2020-11595

< 9.1

An issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801. An unauthenticated attacker can make an API request and obtain

7.5HIGH

CVE-2020-11594

< 9.1

An issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801. An unauthenticated attacker can make an API request that causes

7.5HIGH

CVE-2020-11593

< 9.1

An issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801. An unauthenticated attacker can make an HTTP POST request with

7.5HIGH

CVE-2020-11592

< 9.1

An issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801. An unauthenticated attacker can make an API request and get the

7.5HIGH

CVE-2020-11591

< 9.1

An issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801. An unauthenticated attacker can make an API request and obtain

5.3MEDIUM

CVE-2020-11590

< 9.1

An issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801. An unauthenticated attacker can make an HTTP GET request to Hea

5.3MEDIUM

CVE-2020-11589

< 9.1

An Insecure Direct Object Reference issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801. An unauthenticated attacker ca

7.5HIGH

CVE-2020-11588

< 9.1

An issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801. An unauthenticated attacker can make an HTTP GET request to two

5.3MEDIUM