Back to Database
Status published
High
CVE-2019-17323
ClipSoft REXPERT 1.0.0.527 and earlier version allows arbitrary file creation...
Vulnerability Description
ClipSoft REXPERT 1.0.0.527 and earlier version allows arbitrary file creation and execution via report print function of rexpert viewer with modified XML document. User interaction is required to exploit this vulnerability in that the target must visit a malicious web page.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-17323
Credits & Attribution
No credits recorded in the NVD database.
More from ClipSoft
View All →CVE-2019-17326
ClipSoft REXPERT 1.0.0.527 and earlier version allows remote attacker to...
Medium
6.5
CVE-2019-17325
ClipSoft REXPERT 1.0.0.527 and earlier version allows remote attacker to...
Medium
6.5
CVE-2019-17324
ClipSoft REXPERT 1.0.0.527 and earlier version allows directory traversal by...
Medium
6.5
CVE-2019-17322
ClipSoft REXPERT 1.0.0.527 and earlier version allows arbitrary file creation...
Medium
6.5
CVE-2019-17321
ClipSoft REXPERT 1.0.0.527 and earlier version have an information disclosure...
Medium
5.3
Affected Vendor
ClipSoft
View all reports →Affected Software
REXPERT
Vulnerable Versions:
1.0.0.527 and earlier
Timeline
Official Publish:
October 30th, 2019
Last Modified:
August 5th, 2024
Added to House:
July 20th, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weaknesses (CWE)
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.