Cordaware vulnerabilities
We track 2 vulnerabilities in Cordaware products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on February 18, 2025.
2vulnerabilities
0critical
2high
0exploited
8.6average CVSS score
Latest Cordaware vulnerabilities
- 8.5 High severity
bestinformed Infoclient: External Control of System or Configuration Setting
Via the GUI of the "bestinformed Infoclient", a low-privileged user is by default able to change the server address of the "bestinformed Server" to which this client connects. This is dangerous as the "bestinformed Infoclient" runs with elevated permissions ("
- 8.6 High severity
An authenticated user in the "bestinformed Web" application can execute commands on the…
An authenticated user in the "bestinformed Web" application can execute commands on the underlying server running the application. (Remote Code Execution) For this, the user must be able to create "ScriptVars" with the type „script" and preview them by, for ex