← Back

Jetro Cockpit Secure Browsing

jetro_cockpit_secure_browsing

Vendor: Jetroplatforms • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Jetroplatforms
1Jetro Cockpit Secure Browsing
Apr 29, 2026
Feb 18, 2014
N/A· v4
N/A· v3
9.3 HIGH· v2
The client in Jetro COCKPIT Secure Browsing (JCSB) 4.3.1 and 4.3.3 does not validate the FileName element in an RDP_FILE_TRANSFER document, which allows remote JCSB servers to execute arbitrary programs by providing a .E...Show more
The client in Jetro COCKPIT Secure Browsing (JCSB) 4.3.1 and 4.3.3 does not validate the FileName element in an RDP_FILE_TRANSFER document, which allows remote JCSB servers to execute arbitrary programs by providing a .EXE extension.Show less