Filtered by vendor Caphyon
Subscribe
Total
2 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2023-25396 | 1 Caphyon | 1 Advanced Installer | 2023-02-18 | N/A | 7.8 HIGH |
Privilege escalation in the MSI repair functionality in Caphyon Advanced Installer 20.0 and below allows attackers to access and manipulate system files. | |||||
CVE-2022-27438 | 28 3cx, Boom, Caphyon and 25 more | 98 Call Flow Designer, Crm Template Generator, Boomtv Streamer Portal and 95 more | 2022-10-19 | 5.1 MEDIUM | 8.1 HIGH |
Caphyon Ltd Advanced Installer 19.3 and earlier and many products that use the updater from Advanced Installer (Advanced Updater) are affected by a remote code execution vulnerability via the CustomDetection parameter in the update check function. To exploit this vulnerability, a user must start an affected installation to trigger the update check. |