VYPR
← All advisories
Medium severity6.5NVD Advisory· Published Oct 30, 2019· Updated Jun 17, 2026

CVE-2019-17325

CVE-2019-17325

Description

ClipSoft REXPERT 1.0.0.527 and earlier version allows remote attacker to upload arbitrary local file via the ActiveX method in RexViewerCtrl30.ocx. That could lead to disclosure of sensitive information. User interaction is required to exploit this vulnerability in that the target must visit a malicious web page.

Affected products

2
  • Clipsoft/Rexpertllm-fuzzy2 versions
    <=1.0.0.527+ 1 more
    • (no CPE)range: <=1.0.0.527
    • (no CPE)range: 1.0.0.527 and earlier

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.