Browse CVEs

HIGH 7.8 CVE-2019-10679 Thomson Reuters Eikon 4.0.42144 allows all local users to modify the service executable file because of weak %PROGRAMFILES(X86)%\Thomson Reuters\Eiko… Eikon No fix yet Fix from $1,9502020-09-03 CRITICAL 9.8 CVE-2015-5952 Directory traversal vulnerability in Thomson Reuters for FATCA before 5.2 allows remote attackers to execute arbitrary files via the item parameter. Fatca 5.2+ Fix from $2,3002020-01-15 CRITICAL 9.9 CVE-2015-5951 A file upload issue exists in the specid parameter in Thomson Reuters FATCH before 5.2, which allows malicious users to upload arbitrary PHP files to… Fatca 5.2+ Fix from $2,3002020-01-06 CRITICAL 9.8 CVE-2019-8385EPSS 20% An issue was discovered in Thomson Reuters Desktop Extensions 1.9.0.358. An unauthenticated directory traversal and local file inclusion vulnerabilit… Concourse Matter Room 2.13.0098+ Fix from $2,3002019-06-05 HIGH 7.5 CVE-2018-14607 Thomson Reuters UltraTax CS 2017 on Windows, in a client/server configuration, transfers customer records and bank account numbers in cleartext over … Ultratax Cs 2017 No fix yet Fix from $1,9502018-07-26 HIGH 7.5 CVE-2018-14608 Thomson Reuters UltraTax CS 2017 on Windows has a password protection option; however, the level of protection might be inconsistent with some custom… Ultratax Cs No fix yet Fix from $1,9502018-07-26 HIGH 7.2 CVE-2014-9141 The installer in Thomson Reuters Fixed Assets CS 13.1.4 and earlier uses weak permissions for connectbgdl.exe, which allows local users to execute ar… Fixed Assets Cs after 13.1.4 Fix from $1,9502014-12-03 HIGH 10.0 CVE-2013-5912EPSS 31% VhttpdMgr in Thomson Reuters Velocity Analytics Vhayu Analytic Server 6.94 build 2995 allows remote attackers to execute arbitrary code via a URL in … Velocity Analytics Vhayu Analytic Server Mitigation only Fix from $1,9502013-11-28