Vocera vulnerabilities
We track 4 vulnerabilities in Vocera products across 2 products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on July 25, 2023.
Latest Vocera vulnerabilities
- 7.5 High severity
Report Server: Improper Limitation of a Pathname to a Restricted Directory
An issue was discovered in Vocera Report Server and Voice Server 5.x through 5.8. There is a Path Traversal for an Unzip operation. The Vocera Report Console contains a websocket function that allows for the restoration of the database from a ZIP archive that
- 7.5 High severity
Report Server: Exposure of Resource to Wrong Sphere
An issue was discovered in Vocera Report Server and Voice Server 5.x through 5.8. There is an Access Control Violation for Database Operations. The Vocera Report Console contains a websocket interface that allows for the unauthenticated execution of various ta
- 7.5 High severity
Report Server: Unrestricted Upload of File with Dangerous Type
An issue was discovered in Vocera Report Server and Voice Server 5.x through 5.8. There is Arbitrary File Upload. The BaseController class, that each of the service controllers derives from, allows for the upload of arbitrary files. If the HTTP request is a mu
- 9.8 Critical severity
Report Server: Improper Limitation of a Pathname to a Restricted Directory
An issue was discovered in Vocera Report Server and Voice Server 5.x through 5.8. There is Path Traversal via the "restore SQL data" filename. The Vocera Report Console contains a websocket function that allows for the restoration of the database from a ZIP ar