Skip to content
OpenAdvisories

Product · Cordaware

bestinformed Web

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.6
    CVE-2025-0422

    Authenticated Remote Code Execution via ScriptVar

    An authenticated user in the "bestinformed Web" application can execute commands on the underlying server running the application. (Remote Code Execution) For this, the user must be able to create "ScriptVars" with the type „script" and preview them by, for e…

    Cordaware bestinformed Web