← Back

Apc Easy Ups Online Software

apc_easy_ups_online_software

Vendor: Schneider Electric • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2020-7522
1Schneider Electric
1Apc Easy Ups Online Software
Nov 21, 2024
Aug 31, 2020
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in SFAPV9601 - APC Easy UPS On-Line Software (V2.0 and earlier) when accessing a vulnerable method of `SoundUploadServle...Show more
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in SFAPV9601 - APC Easy UPS On-Line Software (V2.0 and earlier) when accessing a vulnerable method of `SoundUploadServlet` which may lead to uploading executable files to non-specified directories.Show less
CVE-2020-7521
1Schneider Electric
1Apc Easy Ups Online Software
Nov 21, 2024
Aug 31, 2020
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in SFAPV9601 - APC Easy UPS On-Line Software (V2.0 and earlier) when accessing a vulnerable method of `FileUploadServlet...Show more
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in SFAPV9601 - APC Easy UPS On-Line Software (V2.0 and earlier) when accessing a vulnerable method of `FileUploadServlet` which may lead to uploading executable files to non-specified directories.Show less