Back to Database
Status published
Medium
CVE-2019-17322
ClipSoft REXPERT 1.0.0.527 and earlier version allows arbitrary file creation...
Vulnerability Description
ClipSoft REXPERT 1.0.0.527 and earlier version allows arbitrary file creation via a POST request with the parameter set to the file path to be written. This can be an executable file that is written to in the arbitrary directory. User interaction is required to exploit this vulnerability in that the target must visit a malicious web page.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-17322
Credits & Attribution
No credits recorded in the NVD database.
More from ClipSoft
View All →CVE-2019-17326
ClipSoft REXPERT 1.0.0.527 and earlier version allows remote attacker to...
Medium
6.5
CVE-2019-17325
ClipSoft REXPERT 1.0.0.527 and earlier version allows remote attacker to...
Medium
6.5
CVE-2019-17324
ClipSoft REXPERT 1.0.0.527 and earlier version allows directory traversal by...
Medium
6.5
CVE-2019-17323
ClipSoft REXPERT 1.0.0.527 and earlier version allows arbitrary file creation...
High
8.8
CVE-2019-17321
ClipSoft REXPERT 1.0.0.527 and earlier version have an information disclosure...
Medium
5.3
Affected Vendor
ClipSoft
View all reports →Affected Software
REXPERT
Vulnerable Versions:
1.0.0.527 and earlier
Timeline
Official Publish:
October 30th, 2019
Last Modified:
August 5th, 2024
Added to House:
July 20th, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N