Asseco

asseco

2 CVEs • 2 products

Products (2)

Click to collapse

Toggle

CVEs (2)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2025-66955 1Asseco 1Live Jul 5, 2026 Mar 12, 2026 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Local File Inclusion in Contact Plan, E-Mail, SMS and Fax components in Asseco SEE Live 2.0 allows remote authenticated users to access files on the host via "path" parameter in the downloadAttachment and downloadAttachm...Show more Local File Inclusion in Contact Plan, E-Mail, SMS and Fax components in Asseco SEE Live 2.0 allows remote authenticated users to access files on the host via "path" parameter in the downloadAttachment and downloadAttachmentFromPath API calls.Show less
CVE-2022-27192 1Asseco 1Dvs Avilys Jun 17, 2026 Mar 23, 2022 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 The Reporting module in Aseco Lietuva document management system DVS Avilys before 3.5.58 allows unauthorized file download. An unauthenticated attacker can impersonate an administrator by reading administrative files.

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2025-66955

1Asseco

1Live

Jul 5, 2026

Mar 12, 2026

N/A· v4

6.5 MEDIUM· v3

N/A· v2

Local File Inclusion in Contact Plan, E-Mail, SMS and Fax components in Asseco SEE Live 2.0 allows remote authenticated users to access files on the host via "path" parameter in the downloadAttachment and downloadAttachm...Show more

CVE-2022-27192

1Asseco

1Dvs Avilys

Jun 17, 2026

Mar 23, 2022

N/A· v4

7.5 HIGH· v3

5.0 MEDIUM· v2

The Reporting module in Aseco Lietuva document management system DVS Avilys before 3.5.58 allows unauthorized file download. An unauthenticated attacker can impersonate an administrator by reading administrative files.