HOMEVULNERABILITIESVENDORSLucysecurity

LucysecurityCVEs & Vulnerabilities

1 CVEs affecting Lucysecurity products, tracked from the National Vulnerability Database, with CVSS/EPSS scores and exploitation status.

1 CVEs→ All vendors

Most Affected Products

security awareness 1
CVE-2021-28132CRITICAL

LUCY Security Awareness Software through 4.7.x allows unauthenticated remote code execution because the Migration Tool (in the Support section) allows upload of .php files within a system.tar.gz file. The .php file becomes accessible with a public/system/static URI.

11 Mar 2021
9.8
CVSS
← PrevPage 1 / 1Next →
← All Vendors·CVE Database
Lucysecurity CVEs & Vulnerabilities — 1 Tracked