Aggregates CVE and security vulnerability intelligence across all xpand-it-related products, including CVSS, EPSS, publication dates, and vulnerability intelligence data.
Historical issues mainly involve vendor risk cross-site scripting and vendor risk path handling and related problems; some flaws may lead to vendor impact session compromise, affecting vendor surface software deployment scenarios.
| CVE | Summary | Source | Max CVSS | EPSS % | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2023-27168 | An arbitrary file upload vulnerability in Xpand IT Write-back Manager v2.3.1 allows attackers to execute arbitrary code via a crafted jsp file. | [email protected] | 9.8 | 0.24% | 2024-01-19 | 2025-06-02 |
| CVE-2023-27172 | Xpand IT Write-back Manager v2.3.1 uses weak secret keys to sign JWT tokens. This allows attackers to easily obtain the secret key used to sign JWT tokens via a bruteforce attack. | [email protected] | 9.1 | 0.09% | 2023-12-20 | 2025-05-06 |
| CVE-2023-27170 | Xpand IT Write-back manager v2.3.1 allows attackers to perform a directory traversal via modification of the siteName parameter. | [email protected] | 7.5 | 0.44% | 2023-10-26 | 2024-11-21 |
| CVE-2023-27169 | Xpand IT Write-back manager v2.3.1 uses a hardcoded salt in license class configuration which leads to the generation of a hardcoded and predictable symmetric encryption keys for license generation and validation. | [email protected] | 6.5 | 0.16% | 2023-09-12 | 2024-11-21 |
| CVE-2019-19679 | In "Xray Test Management for Jira" prior to version 3.5.5, remote authenticated attackers can cause XSS in the Pre-Condition Summary entry point via the summary field of a Create Pre-Condition action for a new Test Issue. | [email protected] | 5.4 | 0.20% | 2019-12-09 | 2024-11-21 |
| CVE-2019-19678 | In "Xray Test Management for Jira" prior to version 3.5.5, remote authenticated attackers can cause XSS in the generic field entry point via the Generic Test Definition field of a new Generic Test issue. | [email protected] | 5.4 | 0.20% | 2019-12-09 | 2024-11-21 |