Enterprise Cloud Database vulnerabilities

6 known vulnerabilities in Enterprise Cloud Database from Ragic. 6 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Enterprise Cloud Database: Use of Hard-coded Cryptographic Key

  CVE-2025-15016Dec 22, 2025Ragic

  Enterprise Cloud Database developed by Ragic has a Hard-coded Cryptographic Key vulnerability, allowing unauthenticated remote attackers to exploit the fixed key to generate verification information and log into the system as any user.

• 7.5 High severity

  Enterprise Cloud Database: Relative Path Traversal

  CVE-2025-15015Dec 22, 2025Ragic

  Enterprise Cloud Database developed by Ragic has a Arbitrary File Read vulnerability, allowing unauthenticated remote attackers to exploit Relative Path Traversal to download arbitrary system files.

• 7.2 High severity

  Enterprise Cloud Database: Unrestricted Upload of File with Dangerous Type

  CVE-2025-11675Oct 13, 2025Ragic

  Enterprise Cloud Database developed by Ragic has an Arbitrary File Upload vulnerability, allowing privileged remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server.

• 9.8 Critical severity

  Enterprise Cloud Database: Unrestricted Upload of File with Dangerous Type

  CVE-2024-9985Oct 15, 2024Ragic

  Enterprise Cloud Database from Ragic does not properly validate the file type for uploads. Attackers with regular privileges can upload a webshell and use it to execute arbitrary code on the remote server.

• 9.8 Critical severity

  Enterprise Cloud Database: Missing Authentication for Critical Functionality

  CVE-2024-9984Oct 15, 2024Ragic

  Enterprise Cloud Database from Ragic does not authenticate access to specific functionality, allowing unauthenticated remote attackers to use this functionality to obtain any user's session cookie.

• 7.5 High severity

  Enterprise Cloud Database: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2024-9983Oct 15, 2024Ragic

  Enterprise Cloud Database from Ragic does not properly validate a specific page parameter, allowing unauthenticated remote attackers to exploit this vulnerability to read arbitrary system files.