Portfolio vulnerabilities

2 known vulnerabilities in Portfolio from Extensis. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Portfolio: Unrestricted Upload of File with Dangerous Type

  CVE-2022-24254Mar 1, 2022ExtensisEPSS 2.6%

  An unrestricted file upload vulnerability in the Backup/Restore Archive component of Extensis Portfolio v4.0 allows remote attackers to execute arbitrary code via a crafted ZIP file.

• 8.8 High severity

  Portfolio: Unrestricted Upload of File with Dangerous Type

  CVE-2022-24252Mar 1, 2022ExtensisEPSS 2.33%

  An unrestricted file upload vulnerability in the FileTransferServlet component of Extensis Portfolio v4.0 allows remote attackers to execute arbitrary code via a crafted file.