Hybridsoftware Cloudflow — known CVE vulnerabilities

Every CVE whose affected-product data names Hybridsoftware Cloudflow, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2022-41217 — CVSS 9.8 (critical): Cloudflow contains a unauthenticated file upload vulnerability, which makes it possible for an attacker to upload malicious files to the…
• CVE-2022-41216 — CVSS 8.3 (high): Local File Inclusion vulnerability within Cloudflow allows attackers to retrieve confidential information from the system.