Skip to content
1e vulnerabilities
Newest
-
1e client, platform +1 more
Symbolic Link Exploit in 1E Client's - Nomad module allows Arbitrary File Deletion
CVE-2025-1683
7.8 High
-
1e platform
The Duende Identity Server based component in 1E Platform may allow URL redirections to untrusted websites.
CVE-2024-7211
4.7 Medium
-
1e platform
1E-Exchange-DisplayMessage instruction allows for arbitrary code execution
CVE-2023-5964
9.9 Critical
-
1e platform
1E-Exchange-CommandLinePing instruction before v18.1 allows for arbitrary code execution
CVE-2023-45163
9.9 Critical
-
1e platform
1E-Exchange-URLResponseTime instruction before v20.1 allows arbitrary code execution
CVE-2023-45161
9.9 Critical
-
1e platform
Blind SQL vulnerability in 1E platform
CVE-2023-45162
9.9 Critical
-
1e client
Elevated Temp Directory Execution in 1E Client
CVE-2023-45160
8.8 High
-
1e client
1E Client installer can perform arbitrary file deletion on protected files
CVE-2023-45159
8.4 High
-
1e client
The Inventory module of the 1E Client 5.0.0.745 doesn't handle an unquoted path when executing ...
CVE-2020-27645
8.8 High
-
1e client
The Inventory module of the 1E Client 5.0.0.745 doesn't handle an unquoted path when executing ...
CVE-2020-27644
8.8 High
-
1e client
The %PROGRAMDATA%\1E\Client directory in 1E Client 5.0.0.745 and 4.1.0.267 allows remote...
CVE-2020-27643
6.5 Medium
-
1e client
The MSI installer in 1E Client 4.1.0.267 and 5.0.0.745 allows remote authenticated users and...
CVE-2020-16268
8.8 High