Infodom

Infodom Performa 365: vulnerabilities and CVEs

Infodom Performa 365 has 2 published vulnerabilities, 0 of them in the last 12 months. 0 are rated critical and 0 are listed by CISA as actively exploited.

CVEs2

Last 12 months0

Critical0

Actively exploited0

All vulnerabilities in the catalogue →⭐ Follow this technology

Latest vulnerabilities

CVE	Severity	EPSS	Active exploitation	Published	Description
CVE-2024-46624	High (8.8)	0.43%	—	Dec 3, 2024	An issue in InfoDom Performa 365 v4.0.1 allows authenticated attackers to elevate their privileges to Administrator via a crafted payload sent to /api/users.
CVE-2024-46625	High (8.8)	0.55%	—	Dec 3, 2024	An authenticated arbitrary file upload vulnerability in the /documentCache/upload endpoint of InfoDom Performa 365 v4.0.1 allows attackers to execute arbitrary code via uploading a crafted SVG file.

🎯 How it gets exploited (ATT&CK techniques)

T1210 Exploitation of Remote Services2
T1068 Exploitation for Privilege Escalation1
T1505.003 Web Shell1

Number of CVEs of this technology mapped to each exploitation or primary-impact technique.