Advisories · Technology
Altium Enterprise Server.
Every CVE that names Altium Enterprise Server among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 10.0 CriticalCritical · CVSS 9+
Server-Side Request Forgery in Altium Enterprise Server UnifiedLogin Service Allows Unauthenticated System Compromise
- Altium Enterprise Server
- Authentication bypass
- Server-side request forgery (SSRF)
- CVSS 9.4 CriticalCritical · CVSS 9+
Path Traversal in Altium Git Service Allows Remote Code Execution
- Altium Enterprise Server
- Altium 365
- Path traversal
- Code injection
- CVSS 8.3 High
Path Traversal in Altium Projects Service Allows Arbitrary File Read
- Altium Enterprise Server
- Altium 365
- Path traversal
- Information disclosure
- CVSS 10.0 CriticalCritical · CVSS 9+
Path Traversal in Altium Vault ScriptsController Allows Unauthenticated Remote Code Execution
- Altium Enterprise Server
- Altium 365
- Path traversal
- Authentication bypass
- CVSS 8.3 High
Server-Side Request Forgery in Altium Platform Design GraphQL Service Allows Information Disclosure
- Altium Enterprise Server
- Altium 365
- Information disclosure
- Server-side request forgery (SSRF)
- CVSS 9.4 CriticalCritical · CVSS 9+
Path Traversal in Altium Enterprise Server Collaboration Service Allows Privilege Escalation
- Altium Enterprise Server
- Path traversal
- Privilege escalation
- CVSS 10.0 CriticalCritical · CVSS 9+
Path Traversal in Altium Enterprise Server NIS Allows Unauthenticated Arbitrary File Write and File Read
- Altium Enterprise Server
- Path traversal
- Authentication bypass
- CVSS 9.4 CriticalCritical · CVSS 9+
Path Traversal in Altium Enterprise Server Vault UploadController Allows Arbitrary File Write
- Altium Enterprise Server
- Path traversal
- Unrestricted file upload
- CVSS 10.0 CriticalCritical · CVSS 9+
Unauthenticated File Exfiltration in Altium Enterprise Server Vault Service via Hard-coded Cryptographic Key and Path Traversal
- Altium Enterprise Server
- Path traversal
- Hard-coded credentials
- CVSS 9.4 CriticalCritical · CVSS 9+
Path Traversal in Altium Enterprise Server Viewer StorageController Allows Arbitrary File Read
- Altium Enterprise Server
- Path traversal
- Information disclosure
- CVSS 9.4 CriticalCritical · CVSS 9+
Path Traversal in Altium Enterprise Server ComparisonService Allows Arbitrary File Write
- Altium Enterprise Server
- Path traversal
- Unrestricted file upload
- CVSS 8.0 High
Stored Cross-Site Scripting in Altium Enterprise Server Workflow Engine Allows Privilege Escalation
- Altium Enterprise Server
- Cross-site scripting (XSS)
- Privilege escalation