Vitals Enterprise Social Platform vulnerabilities

2 known vulnerabilities in Vitals Enterprise Social Platform from Gss. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Vitals ESP: Unrestricted Upload of File with Dangerous Type

  CVE-2023-41357Nov 3, 2023Galaxy Software Services

  Galaxy Software Services Corporation Vitals ESP is an online knowledge base management portal, it has insufficient filtering and validation during file upload. An authenticated remote attacker with general user privilege can exploit this vulnerability to uploa

• 9.8 Critical severity

  Vitals ESP: Use of Hard-coded Cryptographic Key

  CVE-2023-37291Jul 21, 2023Galaxy Software Services

  Galaxy Software Services Vitals ESP is vulnerable to using a hard-coded encryption key. An unauthenticated remote attacker can generate a valid token parameter and exploit this vulnerability to access system to operate processes and access data. This issue aff