Critical severity9.8NVD Advisory· Published Jan 18, 2022· Updated Jun 17, 2026

CVE-2021-38697

Description

SoftVibe SARABAN for INFOMA 1.1 allows Unauthenticated unrestricted File Upload, that allows attackers to upload files with any file extension which can lead to arbitrary code execution.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

SoftVibe/SARABAN2 versions
cpe:2.3:a:softvibe:saraban:1.1:*:*:*:*:infoma:*:*+ 1 more
- cpe:2.3:a:softvibe:saraban:1.1:*:*:*:*:infoma:*:*
- (no CPE)range: = 1.1
SoftVibe/SARABAN for INFOMAdescription

Patches

Vulnerability mechanics

References

orangeo.tech/post/2021/12/24/First-CVEs.htmlnvdExploitThird Party AdvisoryURL Repurposed
sawatdee.github.io/post/2021/12/24/First-CVEs.htmlnvdExploitThird Party Advisory
www.infoma.net/index.php/saraban/nvdProduct
play.google.com/store/apps/detailsnvdProduct

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000