Cipace
Vendor:
First CVE: Apr 6, 2020 · Active for 6 years
18
Total CVEs
More Total CVEs than 93% of tracked products
9.0
Avg CVEs / Year
Higher CVE frequency than 95% of tracked products
7.5
Avg CVSS
Higher Avg CVSS than 50% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Cipace over time
Volume of CVEsAvg CVSS Base Score
First CVE
Apr 6, 2020
6 years ago
Most Recent CVE
Feb 11, 2026
163 days ago
CVE Severity & Scoring
Cipace18 CVEs
22%
61%
17%
All CVEs352,294 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local0 (0.0%)
Network18 (100.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low18 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None18 (100.0%)
Unknown0 (0.0%)
Required0 (0.0%)
Privileges Required
Low3 (16.7%)
High0 (0.0%)
None15 (83.3%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (18 CVEs).
18 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2020-11597CRITICAL An issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801. An unauthenticated attacker can make an HTTP POST request and inject SQL statements in the user context of the db | Apr 6, 2020 | 9.8 | 29 | NO | NO |
CVE-2024-50619HIGH Vulnerabilities in the My Account and User Management components in CIPPlanner CIPAce before 9.17 allows attackers to escalate their access levels. A low-privileged authenticated u | Feb 11, 2026 | 8.8 | 27 | NO | NO |
CVE-2024-50620HIGH Unrestricted Upload of File with Dangerous Type vulnerabilities exist in the rich text editor and document manage components in CIPPlanner CIPAce before 9.17. An authorized user ca | Feb 11, 2026 | 8.8 | 27 | NO | NO |
CVE-2020-11598CRITICAL An issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801. Upload.ashx allows remote attackers to execute arbitrary code by uploading and executing an ASHX file. | Apr 6, 2020 | 9.8 | 25 | NO | NO |
CVE-2024-50617HIGH Vulnerabilities in the File Download and Get File handler components in CIPPlanner CIPAce before 9.17 allow attackers to download unauthorized files. An authenticated user can easi | Feb 11, 2026 | 7.5 | 24 | NO | NO |
CVE-2020-11586CRITICAL An XXE issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801. An unauthenticated attacker can make an API request that contains malicious XML DTD data. | Apr 6, 2020 | 9.8 | 24 | NO | NO |
CVE-2020-11599HIGH An issue was discovered in CIPPlanner CIPAce 6.80 Build 2016031401. GetDistributedPOP3 allows attackers to obtain the username and password of the SMTP user. | Apr 6, 2020 | 7.5 | 24 | NO | NO |
CVE-2020-11596HIGH A Directory Traversal issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801. An unauthenticated attacker can make HTTP GET requests to a certain URL and obtain information | Apr 6, 2020 | 7.5 | 24 | NO | NO |
CVE-2020-11594HIGH An issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801. An unauthenticated attacker can make an API request that causes a stack error to be shown providing the full file | Apr 6, 2020 | 7.5 | 23 | NO | NO |
CVE-2020-11593HIGH An issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801. An unauthenticated attacker can make an HTTP POST request with injected HTML data that is later leveraged to send | Apr 6, 2020 | 7.5 | 23 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (18 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (18 CVEs).
Media Mentions
Signals from CVEs in this product scope (18 CVEs).
Top CNAs Publishing CVEs For Cipace
Top CWEs
Versions
No cataloged versions.