Vulnerabilities (CVE)

Filtered by vendor Enalean Subscribe
Filtered by product Tuleap
Total 42 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2014-7177 1 Enalean 1 Tuleap 2017-09-08 4.0 MEDIUM N/A
XML External Entity vulnerability in Enalean Tuleap 7.2 and earlier allows remote authenticated users to read arbitrary files via a crafted xml document in a create action to plugins/tracker/.
CVE-2014-7178 1 Enalean 1 Tuleap 2014-12-17 9.3 HIGH N/A
Enalean Tuleap before 7.5.99.6 allows remote attackers to execute arbitrary commands via the User-Agent header, which is provided to the passthru PHP function.