Janitza Gridvis vulnerabilities

2 vulnerabilities

Known vulnerabilities in Janitza Gridvis, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

8.8HighCVE-2023-50894janitza · gridvisjanitza gridvisIn Janitza GridVis through 9.0.66, use of hard-coded credentials in the de.janitza.pasw.feature.impl.activators.PasswordEncryption password encryption function allows remote authenticated administrative users to discover cleartext database credentials contained in error report information.EPSS0.42%7.2HighCVE-2023-50895janitza · gridvisjanitza gridvisIn Janitza GridVis through 9.0.66, exposed dangerous methods in the de.janitza.pasw.project.server.ServerDatabaseProject project load functionality allow remote authenticated administrative users to execute arbitrary Groovy code.EPSS0.66%