Filtered by vendor Asseco Subscriptions
Filtered by product See Live Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2025-66955 1 Asseco 1 See Live 2026-03-14 6.5 Medium
Local File Inclusion in Contact Plan, E-Mail, SMS and Fax components in Asseco SEE Live 2.0 allows remote authenticated users to access files on the host via "path" parameter in the downloadAttachment and downloadAttachmentFromPath API calls.
CVE-2025-66956 1 Asseco 1 See Live 2026-03-13 9.9 Critical
Insecure Access Control in Contact Plan, E-Mail, SMS and Fax components in Asseco SEE Live 2.0 allows remote attackers to access and execute attachments via a computable URL.