汇总 gleamtech 相关全部产品的 CVE 与安全漏洞情报，包括 CVSS、EPSS、公开时间与漏洞情报数据。
常见弱点模式包括 路径处理缺陷、跨站脚本与输入验证问题，在 生产负载与软件部署 使用场景中可能带来 文件覆盖、异常行为与会话劫持 等风险。
相关漏洞数据主要来源于公开漏洞披露与安全公告，可用于评估历史漏洞暴露面与修复优先级。
| CVE | 摘要 | 来源 | 最高 CVSS | EPSS % | 公开时间 | 更新时间 |
|---|---|---|---|---|---|---|
| CVE-2024-57249 | Incorrect Access Control in the Preview Function of Gleamtech FileVista 9.2.0.0 allows remote attackers to gain unauthorized access via exploiting a vulnerability in access control mechanisms by removing authentication-related HTTP headers, such as the Cookie header, in the request. This bypasses the authentication process and grants attackers access to sensitive image files without proper login credentials. | [email protected] | 6.5 | 0.46% | 2025-02-07 | 2026-06-17 |
| CVE-2024-57248 | Directory Traversal in File Upload in Gleamtech FileVista 9.2.0.0 allows remote attackers to achieve Code Execution, Information Disclosure, and Escalation of Privileges via injecting malicious payloads in HTTP requests to manipulate file paths, bypass access controls, and upload malicious files. | [email protected] | 6.3 | 3.16% | 2025-02-07 | 2026-06-17 |
| CVE-2020-15015 | The FileExplorer component in GleamTech FileUltimate 6.1.5.0 allows XSS via an SVG document. | [email protected] | 6.1 | 0.69% | 2020-06-24 | 2026-06-16 |
| CVE-2014-8789 | GleamTech FileVista before 6.1 allows remote authenticated users to create arbitrary files and possibly execute arbitrary code via a crafted path in a zip archive, which is not properly handled during extraction. | [email protected] | 6.5 | 3.22% | 2014-12-02 | 2026-06-16 |
| CVE-2014-8788 | GleamTech FileVista before 6.1 allows remote authenticated users to obtain sensitive information via a crafted path when saving a zip file, which reveals the installation path in an error message. | [email protected] | 4.0 | 1.83% | 2014-12-02 | 2026-06-16 |