VYPR

CX-Designer

by Omron

CVEs (2)

  • CVE-2024-12298MedJan 14, 2025
    risk 0.36cvss 5.5epss 0.00

    We found a vulnerability Improper Restriction of XML External Entity Reference (CWE-611) in NB-series NX-Designer. Attackers may be able to abuse this vulnerability to disclose confidential data on a computer.

  • CVE-2023-43624MedOct 23, 2023
    risk 0.36cvss 5.5epss 0.00

    CX-Designer Ver.3.740 and earlier (included in CX-One CXONE-AL[][]D-V4) contains an improper restriction of XML external entity reference (XXE) vulnerability. If a user opens a specially crafted project file created by an attacker, sensitive information in the file system where…