Vulnerabilities > Jedox > Jedox Cloud
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2023-05-12 | CVE-2022-47879 | Unspecified vulnerability in Jedox and Jedox Cloud A Remote Code Execution (RCE) vulnerability in /be/rpc.php in Jedox 2020.2.5 allows remote authenticated users to load arbitrary PHP classes from the 'rtn' directory and execute its methods. | 7.5 |
2023-05-12 | CVE-2022-47880 | Insufficiently Protected Credentials vulnerability in Jedox and Jedox Cloud An Information disclosure vulnerability in /be/rpc.php in Jedox GmbH Jedox 2020.2.5 allow remote, authenticated users with permissions to modify database connections to disclose a connections' cleartext password via the 'test connection' function. | 5.3 |