Deltaflow

CVE-2021-28173 Apr 06, 12:15 CRITICAL Act Now

The file upload function of Vangene deltaFlow E-platform does not perform access controlled properly. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

CVE-2021-28172 Apr 06, 12:15 HIGH This Week

There is a Path Traversal vulnerability in the file download function of Vangene deltaFlow E-platform. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

CVE-2021-28171 Apr 06, 12:15 CRITICAL Act Now

The Vangene deltaFlow E-platform does not take properly protective measures. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.