Vendor/product archive

altova / mobiletogether_server CVEs

Beta · best-effort

2 CVEs tagged to altova / mobiletogether_server — 1 Critical, 1 High, 0 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to altova vendor archive

CVE-2021-38490

Published Aug 10, 2021

Altova MobileTogether Server before 7.3 SP1 allows XML exponential entity expansion, a different vulnerability than CVE-2021-37425.

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

CVE-2021-37425

Published Aug 10, 2021

Altova MobileTogether Server before 7.3 SP1 allows XXE attacks, such as an InfoSetChanges/Changes attack against /workflowmanagement, or reading mobiletogetherserver.cfg and then…

CVSS 9.1 · Critical

Vendor/product tagsBeta · best-effort

Showing 1-2 of 2 CVEsPage 1 of 1