cbcvebase.

Deltek Ajera vulnerabilities

1 known vulnerability affecting deltek/ajera.

Total CVEs
1
CISA KEV
0
Public exploits
1
Exploited in wild
0
Severity breakdown
HIGH1

Vulnerabilities

Page 1 of 1
CVE-2018-20221P2HIGHCVSS 8.8PoC≤ 9.10.162019-03-21
CVE-2018-20221 [HIGH] CWE-502 CVE-2018-20221: Secure/SAService.rem in Deltek Ajera Timesheets 9.10.16 and prior are vulnerable to remote code exec Secure/SAService.rem in Deltek Ajera Timesheets 9.10.16 and prior are vulnerable to remote code execution via deserialization of untrusted user input from an authenticated user. The executed code will run as the IIS Application Pool that is running the application.
nvd
Deltek Ajera vulnerabilities | cvebase