Skip to content
OpenAdvisories

Vendor

Cordaware

4 known vulnerabilities.

Products

bestinformed Web 3 bestinformed Infoclient 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.5
    CVE-2025-0425

    Local Privilege Escalation via Config Manipulation

    Via the GUI of the "bestinformed Infoclient", a low-privileged user is by default able to change the server address of the "bestinformed Server" to which this client connects. This is dangerous as the "bestinformed Infoclient" runs with elevated permissions (…

    Cordaware bestinformed Infoclient
  • High 8.6
    CVE-2025-0422

    Authenticated Remote Code Execution via ScriptVar

    An authenticated user in the "bestinformed Web" application can execute commands on the underlying server running the application. (Remote Code Execution) For this, the user must be able to create "ScriptVars" with the type „script" and preview them by, for e…

    Cordaware bestinformed Web