CVE-2019-17323CWE-91

ClipSoft REXPERT 1.0.0.527 and earlier version allows arbitrary file creation and execution via report print function of rexpert viewer with modified XML…

published October 30, 2019

CVSS
—
EPSS
2%
Percentile
75.5
In the wild
Unconfirmed
What it is

ClipSoft REXPERT 1.0.0.527 and earlier version allows arbitrary file creation and execution via report print function of rexpert viewer with modified XML document. User interaction is required to exploit this vulnerability in that the target must visit a malicious web page.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01594 · 75.5th percentile
Weakness
CWE-91 · XML Injection (aka Blind XPath Injection)
Published
2019-10-30T20:49Z
EPSS history
Timeline
  • 30 OCT 20:49Z
    ClipSoft REXPERT 1.0.0.527 and earlier version allows arbitrary file creation and execution via report print function of rexpert viewer with modified XML…
    cvelistv5