e-management vulnerabilities

2 known vulnerabilities in e-management from E-solutions. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.3 Critical severity

  e-management: Improper Neutralization of Special Elements used in an OS Command

  CVE-2025-3022Mar 31, 2025E-solutionsEPSS 1.07%

  Os command injection vulnerability in e-solutions e-management. This vulnerability allows an attacker to execute arbitrary commands on the server via the ‘client’ parameter in the /data/apache/e-management/api/api3.php endpoint.

• 8.7 High severity

  e-management: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2025-3021Mar 31, 2025E-solutions

  Path Traversal vulnerability in e-solutions e-management. This vulnerability could allow an attacker to access confidential files outside the expected scope via the ‘file’ parameter in the /downloadReport.php endpoint.