CVE-2019-17325CWE-434

ClipSoft REXPERT 1.0.0.527 and earlier version allows remote attacker to upload arbitrary local file via the ActiveX method in RexViewerCtrl30.ocx

published October 30, 2019

CVSS
—
EPSS
1%
Percentile
69.1
In the wild
Unconfirmed
What it is

ClipSoft REXPERT 1.0.0.527 and earlier version allows remote attacker to upload arbitrary local file via the ActiveX method in RexViewerCtrl30.ocx. That could lead to disclosure of sensitive information. User interaction is required to exploit this vulnerability in that the target must visit a malicious web page.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01247 · 69.1th percentile
Weakness
CWE-434 · Unrestricted Upload of File with Dangerous Type
Published
2019-10-30T20:55Z
EPSS history
Timeline
  • 30 OCT 20:55Z
    ClipSoft REXPERT 1.0.0.527 and earlier version allows remote attacker to upload arbitrary local file via the ActiveX method in RexViewerCtrl30.ocx
    cvelistv5