Agilepoint Nx vulnerabilities

2 known vulnerabilities in Agilepoint Nx from AgilePoint. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  NX: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2023-31179May 8, 2023AgilePoint

  AgilePoint NX v8.0 SU2.2 & SU2.3 - Path traversal - Vulnerability allows path traversal and downloading files from the server, by an unspecified request.

• 8.8 High severity

  Agile Point NX: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2022-30619Jul 6, 2022Agile Point

  Editable SQL Queries behind Base64 encoding sending from the Client-Side to The Server-Side for a particular API used in legacy Work Center module. He attack is available for any authenticated user, in any kind of rule. under the function : /AgilePointServer/E