smartvista_cardgen vulnerabilities
CVEs whose affected-version data names the smartvista_cardgen package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2022-38614High· 7.5An issue in the IGB Files and OutfileService features of SmartVista Cardgen v3.28.0 allows attackers to list and download arbitrary files via modifying the PATH parameter.
An issue in the IGB Files and OutfileService features of SmartVista Cardgen v3.28.0 allows attackers to list and download arbitrary files via modifying the PATH parameter.
▾ Twilightbpcbt · smartvista_cardgenEPSS 1.0%via NVD
CVE-2022-38613Medium· 6.5A Path Traversal vulnerability in SmartVista Cardgen v3.28.0 allows authenticated attackers to read arbitrary files in the system.
A Path Traversal vulnerability in SmartVista Cardgen v3.28.0 allows authenticated attackers to read arbitrary files in the system.
▾ Sunlitbpcbt · smartvista_cardgenEPSS 0.99%via NVD