Vulnerabilities > Ragic > Enterprise Cloud Database > Critical

DATE CVE VULNERABILITY TITLE RISK
2024-10-15 CVE-2024-9985 Unrestricted Upload of File with Dangerous Type vulnerability in Ragic Enterprise Cloud Database
Enterprise Cloud Database from Ragic does not properly validate the file type for uploads.
network
low complexity
ragic CWE-434
critical
9.8
2024-10-15 CVE-2024-9984 Missing Authentication for Critical Function vulnerability in Ragic Enterprise Cloud Database
Enterprise Cloud Database from Ragic does not authenticate access to specific functionality, allowing unauthenticated remote attackers to use this functionality to obtain any user's session cookie.
network
low complexity
ragic CWE-306
critical
9.8