← Back

Landray

landray

4 CVEs • 2 products

Products (2)

Click to collapse
Toggle
Landray Ekp
landray_ekp
3 CVEs
Landray Office Automation
landray_office_automation
1 CVE

CVEs (4)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2024-11239
1Landray
1Landray Ekp
Jun 17, 2026
Nov 15, 2024
5.3 MEDIUM· v4
4.3 MEDIUM· v3
5.5 MEDIUM· v2
A vulnerability has been found in Landray EKP up to 16.0 and classified as critical. This vulnerability affects the function deleteFile of the file /sys/common/import.do?method=deleteFile of the component API Interface....Show more
A vulnerability has been found in Landray EKP up to 16.0 and classified as critical. This vulnerability affects the function deleteFile of the file /sys/common/import.do?method=deleteFile of the component API Interface. The manipulation of the argument folder leads to path traversal. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.Show less
CVE-2024-11238
1Landray
1Landray Ekp
Jun 17, 2026
Nov 15, 2024
6.9 MEDIUM· v4
5.3 MEDIUM· v3
6.4 MEDIUM· v2
A vulnerability, which was classified as critical, was found in Landray EKP up to 16.0. This affects the function delPreviewFile of the file /sys/ui/sys_ui_component/sysUiComponent.do?method=delPreviewFile. The manipulat...Show more
A vulnerability, which was classified as critical, was found in Landray EKP up to 16.0. This affects the function delPreviewFile of the file /sys/ui/sys_ui_component/sysUiComponent.do?method=delPreviewFile. The manipulation of the argument directoryPath leads to path traversal. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.Show less
CVE-2022-34924
1Landray
1Landray Office Automation
Jun 17, 2026
Aug 2, 2022
N/A· v4
7.5 HIGH· v3
N/A· v2
Lanling OA Landray Office Automation (OA) internal patch number #133383/#137780 contains an arbitrary file read vulnerability via the component /sys/ui/extend/varkind/custom.jsp.
CVE-2021-3159
1Landray
1Landray Ekp
Jun 17, 2026
Jul 23, 2021
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
A stored cross site scripting (XSS) vulnerability in the /sys/attachment/uploaderServlet component of Landray EKP V12.0.9.R.20160325 allows attackers to execute arbitrary web scripts or HTML via a crafted SVG, SHTML, or...Show more
A stored cross site scripting (XSS) vulnerability in the /sys/attachment/uploaderServlet component of Landray EKP V12.0.9.R.20160325 allows attackers to execute arbitrary web scripts or HTML via a crafted SVG, SHTML, or MHT file.Show less