VYPR

LiveBOS

by Fujian Apex

CVEs (2)

  • CVE-2024-13981CriAug 27, 2025
    risk 0.65cvss epss 0.02

    LiveBOS, an object-oriented business architecture middleware suite developed by Apex Software Co., Ltd., contains an arbitrary file upload vulnerability in its UploadFile.do;.js.jsp endpoint. This flaw affects the LiveBOS Server component and allows unauthenticated remote…

  • CVE-2026-7519HigMay 1, 2026
    risk 0.47cvss 7.3epss 0.00

    A vulnerability has been found in Fujian Apex LiveBOS up to 2.0. Impacted is an unknown function of the file /feed/UploadImage.do of the component Endpoint. Such manipulation of the argument filename leads to path traversal. The attack can be launched remotely. The exploit has…