CyberSecBulletin

Jedox vulnerabilities

We track 2 vulnerabilities in Jedox products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on May 12, 2023.

2vulnerabilities
0critical
2high
0exploited
8.2average CVSS score

Latest Jedox vulnerabilities

  • 7.5 High severity

    Jedox: Improper Control of Generation of Code

    CVE-2022-47879JedoxEPSS 6.3%

    A Remote Code Execution (RCE) vulnerability in /be/rpc.php in Jedox 2020.2.5 allows remote authenticated users to load arbitrary PHP classes from the 'rtn' directory and execute its methods. NOTE: The vendor states that the vulnerability affects installations

  • 8.8 High severity

    Jedox: Unrestricted Upload of File with Dangerous Type

    CVE-2022-47878JedoxEPSS 35.7%

    Incorrect input validation for the default-storage-path in the settings page in Jedox 2020.2.5 allows remote, authenticated users to specify the location as Webroot directory. Consecutive file uploads can lead to the execution of arbitrary code. NOTE: The vend