Skip to content
OpenAdvisories

Product · 1E

Platform

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.9
    CVE-2023-5964

    1E-Exchange-DisplayMessage instruction allows for arbitrary code execution

    The 1E-Exchange-DisplayMessageinstruction that is part of the End-User Interaction product pack available on the 1E Exchange does not properly validate the Caption or Message parameters, which allows for a specially crafted input to perform arbitrary code exe…

    1E Platform
  • Critical 9.9
    CVE-2023-45163

    1E-Exchange-CommandLinePing instruction before v18.1 allows for arbitrary code execution

    The 1E-Exchange-CommandLinePing instruction that is part of the Network product pack available on the 1E Exchange does not properly validate the input parameter, which allows for a specially crafted input to perform arbitrary code execution with SYSTEM permis…

    1E Platform
  • Critical 9.9
    CVE-2023-45161

    1E-Exchange-URLResponseTime instruction before v20.1 allows arbitrary code execution

    The 1E-Exchange-URLResponseTime instruction that is part of the Network product pack available on the 1E Exchange does not properly validate the URL parameter, which allows for a specially crafted input to perform arbitrary code execution with SYSTEM permissi…

    1E Platform