Vulnerabilities > Esst

DATE CVE VULNERABILITY TITLE RISK
2023-10-17 CVE-2023-41629 Unspecified vulnerability in Esst Monitoring 2.147.1
A lack of input sanitizing in the file download feature of eSST Monitoring v2.147.1 allows attackers to execute a path traversal.
network
low complexity
esst
7.5
2023-10-17 CVE-2023-41630 Code Injection vulnerability in Esst Monitoring 2.147.1
eSST Monitoring v2.147.1 was discovered to contain a remote code execution (RCE) vulnerability via the Gii code generator component.
network
low complexity
esst CWE-94
critical
9.8
2023-10-17 CVE-2023-41631 Unrestricted Upload of File with Dangerous Type vulnerability in Esst Monitoring 2.147.1
eSST Monitoring v2.147.1 was discovered to contain a remote code execution (RCE) vulnerability via the file upload function.
network
low complexity
esst CWE-434
8.8