E-solutions vulnerabilities
We track 2 vulnerabilities in E-solutions products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on March 31, 2025.
2vulnerabilities
1critical
1high
0exploited
9.0average CVSS score
Latest E-solutions vulnerabilities
- 9.3 Critical severity
e-management: Improper Neutralization of Special Elements used in an OS Command
Os command injection vulnerability in e-solutions e-management. This vulnerability allows an attacker to execute arbitrary commands on the server via the ‘client’ parameter in the /data/apache/e-management/api/api3.php endpoint.
- 8.7 High severity
e-management: Improper Limitation of a Pathname to a Restricted Directory
Path Traversal vulnerability in e-solutions e-management. This vulnerability could allow an attacker to access confidential files outside the expected scope via the ‘file’ parameter in the /downloadReport.php endpoint.