Remedy Smart Reporting

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2019-11216 Dec 04, 20:15 MEDIUM POC This Month

BMC Smart Reporting 7.3 20180418 allows authenticated XXE within the import functionality. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

XXE File Upload Bmc Remedy Smart Reporting

NVD

CVSS 3.1

6.5

EPSS

1.8%

CVE-2019-1010147 Jul 26, 00:15 MEDIUM POC This Month

Yellowfin Smart Reporting All Versions Prior to 7.3 is affected by: Incorrect Access Control - Privileges Escalation. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

XSS Bmc Remedy Smart Reporting Yellowfin Bi Yellowfinbi

NVD

CVSS 3.0

5.4

EPSS

0.7%

CVE-2019-11216

EPSS 2% CVSS 6.5

MEDIUM POC This Month

XXE File Upload Bmc +1

NVD

CVE-2019-1010147

EPSS 1% CVSS 5.4

MEDIUM POC This Month

XSS Bmc Remedy Smart Reporting +2

NVD