Skip to main content

CVE mentions, exploit signals, and PoC evidence in one fast public view.

Vendor archive

altova CVEs

Beta · best-effort

5 CVEs tagged to vendor altova — 1 Critical, 1 High, 3 Medium, 0 Low, 0 Unrated.

See this archive with more filters View vendor evidence profile Explore

CVE-2021-38490

Published Aug 10, 2021

Altova MobileTogether Server before 7.3 SP1 allows XML exponential entity expansion, a different vulnerability than CVE-2021-37425.

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

CVE-2021-37425

Published Aug 10, 2021

Altova MobileTogether Server before 7.3 SP1 allows XXE attacks, such as an InfoSetChanges/Changes attack against /workflowmanagement, or reading mobiletogetherserver.cfg and then…

CVSS 9.1 · Critical

Vendor/product tagsBeta · best-effort

CVE-2010-5273

Published Sep 7, 2012

Untrusted search path vulnerability in Altova DiffDog 2011 Enterprise Edition SP1 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working d…

CVSS 6.9 · Medium

Vendor/product tagsBeta · best-effort

CVE-2010-5272

Published Sep 7, 2012

Untrusted search path vulnerability in Altova DatabaseSpy 2011 Enterprise Edition SP1 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current worki…

CVSS 6.9 · Medium

Vendor/product tagsBeta · best-effort

CVE-2010-5271

Published Sep 7, 2012

Untrusted search path vulnerability in Altova MapForce 2011 Enterprise Edition SP1 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working…

CVSS 6.9 · Medium

Vendor/product tagsBeta · best-effort

Showing 1-5 of 5 CVEsPage 1 of 1