1E vulnerabilities

CVEs per yearBy the year they were published

1. 20236
2. 20241
3. 20251

Newest CVEs

• CVE-2025-1683

  Symbolic Link Exploit in 1E Client's - Nomad module allows Arbitrary File Deletion

  1E · 1E Client

  High7.8
• CVE-2024-7211

  The Duende Identity Server based component in 1E Platform may allow URL redirections to untrusted websites.

  1E · 1E Platform

  Medium4.7
• CVE-2023-5964

  1E-Exchange-DisplayMessage instruction allows for arbitrary code execution

  1E · Platform

  Critical9.9
• CVE-2023-45163

  1E-Exchange-CommandLinePing instruction before v18.1 allows for arbitrary code execution

  1E · Platform

  Critical9.9
• CVE-2023-45161

  1E-Exchange-URLResponseTime instruction before v20.1 allows arbitrary code execution

  1E · Platform

  Critical9.9
• CVE-2023-45162

  Blind SQL vulnerability in 1E platform

  1E · 1E Platform

  Critical9.9
• CVE-2023-45160

  Elevated Temp Directory Execution in 1E Client

  1E · 1E Client

  High8.8
• CVE-2023-45159

  1E Client installer can perform arbitrary file deletion on protected files

  1E · 1E Client

  High8.4