Skip to content
OpenAdvisories

Vendor

Vangene

3 known vulnerabilities.

Products

deltaFlow E-platform 3
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2021-28173

    Vangene deltaFlow E-platform - Arbitrary File Upload

    The file upload function of Vangene deltaFlow E-platform does not perform access controlled properly. Remote attackers can upload and execute arbitrary files without login.

    Vangene deltaFlow E-platform
  • Critical 9.8
    CVE-2021-28171

    Vangene deltaFlow E-platform - Broken Authentication

    The Vangene deltaFlow E-platform does not take properly protective measures. Attackers can obtain privileged permissions remotely by tampering with users’ data in the Cookie.

    Vangene deltaFlow E-platform