Vulnerabilities (CVE)

Filtered by vendor Jedox Subscribe
Filtered by product Jedox Cloud
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-47880 1 Jedox 2 Jedox, Jedox Cloud 2024-11-21 N/A 5.3 MEDIUM
An Information disclosure vulnerability in /be/rpc.php in Jedox GmbH Jedox 2020.2.5 allow remote, authenticated users with permissions to modify database connections to disclose a connections' cleartext password via the 'test connection' function.
CVE-2022-47879 1 Jedox 2 Jedox, Jedox Cloud 2024-11-21 N/A 7.5 HIGH
A Remote Code Execution (RCE) vulnerability in /be/rpc.php in Jedox 2020.2.5 allows remote authenticated users to load arbitrary PHP classes from the 'rtn' directory and execute its methods.