Approved changes feed: RSS · Atom
cpe:2.3:a:guangzhou_smart_software_co.,_ltd.:smartbi:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Guangzhou Smart Software Co., Ltd. (9fa2d5fc-712b-5a85-b830-2c2b535a73ad) |
|---|---|
| Product | Smartbi (57508f84-cc21-5a52-96fa-a698a2384cad) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-7305 |
vulnerable | 2026-06-08 06:21:57.515992 |
SmartBI RMIServlet Unrestricted File Upload RCE
SmartBI V8, V9, and V10 contain an unrestricted file upload vulnerability via the RMIServlet request handling logic. Under certain configurations or usage patterns, attackers can send specially crafted requests that cause the application to perform sensitive operations or execute arbitrary code on the host. The vendor released a fix in July 2023 to address the underlying flaw. VulnCheck has observed this vulnerability being exploited in the wild.
Published: 2025-10-15T01:24:53.813Z
Updated: 2025-11-07T17:14:37.318Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.