Skip to main content

Oaklouds Webbase 2 0

2 CVEs product

Monthly

CVE-2024-26261 CRITICAL Act Now

The functionality for file download in HGiga OAKlouds' certain modules contains an Arbitrary File Read and Delete vulnerability. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Path Traversal Oaklouds Organization 2 0 Oaklouds Organization 3 0 Oaklouds Webbase 2 0 Oaklouds Webbase 3 0
NVD
CVSS 3.1
9.8
EPSS
0.7%
CVE-2024-26260 CRITICAL Act Now

The functionality for synchronization in HGiga OAKlouds' certain moudules has an OS Command Injection vulnerability, allowing remote attackers to inject system commands within specific request. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Command Injection Oaklouds Organization 2 0 Oaklouds Organization 3 0 Oaklouds Webbase 2 0 +1
NVD
CVSS 3.1
9.8
EPSS
1.6%
EPSS 1% CVSS 9.8
CRITICAL Act Now

The functionality for file download in HGiga OAKlouds' certain modules contains an Arbitrary File Read and Delete vulnerability. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Path Traversal Oaklouds Organization 2 0 Oaklouds Organization 3 0 +2
NVD
EPSS 2% CVSS 9.8
CRITICAL Act Now

The functionality for synchronization in HGiga OAKlouds' certain moudules has an OS Command Injection vulnerability, allowing remote attackers to inject system commands within specific request. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Command Injection Oaklouds Organization 2 0 +3
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy