Fileorbis
Monthly
Stored cross-site scripting in FileOrbis before version 16.5 allows authenticated low-privileged users to inject persistent malicious scripts into pages subsequently rendered for other users. When a victim browses to affected content while authenticated, the injected script executes in their browser context, enabling session hijacking, credential theft, or unauthorized actions on behalf of the victim. Reported by TR-CERT; no public exploit identified at time of analysis, and the product does not appear in the CISA KEV catalog, indicating no confirmed active exploitation.
Path Traversal vulnerability in Deytek Informatics FileOrbis File Management System allows Path Traversal.6.3. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Stored cross-site scripting in FileOrbis before version 16.5 allows authenticated low-privileged users to inject persistent malicious scripts into pages subsequently rendered for other users. When a victim browses to affected content while authenticated, the injected script executes in their browser context, enabling session hijacking, credential theft, or unauthorized actions on behalf of the victim. Reported by TR-CERT; no public exploit identified at time of analysis, and the product does not appear in the CISA KEV catalog, indicating no confirmed active exploitation.
Path Traversal vulnerability in Deytek Informatics FileOrbis File Management System allows Path Traversal.6.3. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.