Jedox Cloud

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2022-47880 MEDIUM POC This Month

An Information disclosure vulnerability in /be/rpc.php in Jedox GmbH Jedox 2020.2.5 allow remote, authenticated users with permissions to modify database connections to disclose a connections'. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable. Public exploit code available and no vendor patch available.

Information Disclosure PHP Jedox Jedox Cloud

NVD Exploit-DB VulDB

CVSS 3.1

5.3

EPSS

3.2%

CVE-2022-47879 HIGH POC This Week

A Remote Code Execution (RCE) vulnerability in /be/rpc.php in Jedox 2020.2.5 allows remote authenticated users to load arbitrary PHP classes from the 'rtn' directory and execute its methods. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable. Public exploit code available and no vendor patch available.

Code Injection PHP RCE Jedox Jedox Cloud

NVD Exploit-DB VulDB

CVSS 3.1

7.5

EPSS

6.7%

CVE-2022-47880

EPSS 3% CVSS 5.3

MEDIUM POC This Month

Information Disclosure PHP Jedox +1

NVD Exploit-DB VulDB

CVE-2022-47879

EPSS 7% CVSS 7.5

HIGH POC This Week

Code Injection PHP RCE +2

NVD Exploit-DB VulDB