Genivia Inc. vulnerabilities
2 vulnerabilities
Known vulnerabilities in Genivia Inc. products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 2 products.
Products
2- Crystal Live HTTP Server1 vulnerabilities
- Gsoap1 vulnerabilities
CVE-2019-25352genivia inc.crystal live http server
EPSS score0.89%
Crystal Live HTTP Server 6.01 contains a directory traversal vulnerability that allows remote attackers to access system files by manipulating URL path segments. Attackers can use multiple '../' sequences to navigate outside the web root and retrieve sensitive configuration files like Windows system files.CVE-2019-25355debiangsoap+3EPSS score1.36%
gSOAP 2.8 contains a directory traversal vulnerability that allows unauthenticated attackers to access system files by manipulating HTTP path traversal techniques. Attackers can retrieve sensitive files like /etc/passwd by sending crafted GET requests with multiple '../' directory traversal sequences.