Cipplanner vulnerabilities
We track 3 vulnerabilities in Cipplanner products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on February 11, 2026.
Latest Cipplanner vulnerabilities
- 8.8 High severity
Cipace: Improper Privilege Management
Vulnerabilities in the My Account and User Management components in CIPPlanner CIPAce before 9.17 allows attackers to escalate their access levels. A low-privileged authenticated user can gain access to other people's accounts by tampering with the client's us
- 7.5 High severity
Cipace: Improper Authorization
Vulnerabilities in the File Download and Get File handler components in CIPPlanner CIPAce before 9.17 allow attackers to download unauthorized files. An authenticated user can easily change the file id parameter or pass the physical file path in the URL query
- 8.8 High severity
Cipace: Unrestricted Upload of File with Dangerous Type
Unrestricted Upload of File with Dangerous Type vulnerabilities exist in the rich text editor and document manage components in CIPPlanner CIPAce before 9.17. An authorized user can upload executable files when inserting images in the rich text editor, and upl