← Back

Web Time And Expense

web_time_and_expense

Vendor: Xtivia • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2019-19616
1Xtivia
1Web Time And Expense
Jun 17, 2026
Dec 6, 2019
N/A· v4
4.3 MEDIUM· v3
4.0 MEDIUM· v2
An Insecure Direct Object Reference (IDOR) vulnerability in the Xtivia Web Time and Expense (WebTE) interface used for Microsoft Dynamics NAV before 2017 allows an attacker to download arbitrary files by specifying arbit...Show more
An Insecure Direct Object Reference (IDOR) vulnerability in the Xtivia Web Time and Expense (WebTE) interface used for Microsoft Dynamics NAV before 2017 allows an attacker to download arbitrary files by specifying arbitrary values for the recId and filename parameters of the /Home/GetAttachment function.Show less