Wipro

wipro

3 CVEs • 1 product

Products (1)

Click to collapse

Toggle

CVEs (3)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2021-38283 1Wipro 1Holmes Jun 17, 2026 Nov 29, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Wipro Holmes Orchestrator 20.4.1 (20.4.1_02_11_2020) allows remote attackers to read application log files containing sensitive information via a predictable /log URI.
CVE-2021-38147 1Wipro 1Holmes Jun 17, 2026 Nov 29, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Wipro Holmes Orchestrator 20.4.1 (20.4.1_02_11_2020) allows remote attackers to download arbitrary files, such as reports containing sensitive information, because authentication is not required for API access to process...Show more Wipro Holmes Orchestrator 20.4.1 (20.4.1_02_11_2020) allows remote attackers to download arbitrary files, such as reports containing sensitive information, because authentication is not required for API access to processexecution/DownloadExcelFile/Domain_Credential_Report_Excel, processexecution/DownloadExcelFile/User_Report_Excel, processexecution/DownloadExcelFile/Process_Report_Excel, processexecution/DownloadExcelFile/Infrastructure_Report_Excel, or processexecution/DownloadExcelFile/Resolver_Report_Excel.Show less
CVE-2021-38146 1Wipro 1Holmes Jun 17, 2026 Nov 22, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 The File Download API in Wipro Holmes Orchestrator 20.4.1 (20.4.1_02_11_2020) allows remote attackers to read arbitrary files via absolute path traversal in the SearchString JSON field in /home/download POST data.