11E

Products

Exploited and recent CVEs

• CVE-2025-1683 High 7.8 Symbolic Link Exploit in 1E Client's - Nomad module allows Arbitrary File Deletion 0.2%
• CVE-2024-7211 Medium 4.7 The Duende Identity Server based component in 1E Platform may allow URL redirections to untrusted websites. 0.2%
• CVE-2023-5964 Critical 9.9 1E-Exchange-DisplayMessage instruction allows for arbitrary code execution 0.8%
• CVE-2023-45163 Critical 9.9 1E-Exchange-CommandLinePing instruction before v18.1 allows for arbitrary code execution 0.9%
• CVE-2023-45161 Critical 9.9 1E-Exchange-URLResponseTime instruction before v20.1 allows arbitrary code execution 0.8%
• CVE-2023-45162 Critical 9.9 Blind SQL vulnerability in 1E platform 0.7%
• CVE-2023-45160 High 8.8 Elevated Temp Directory Execution in 1E Client 0.9%
• CVE-2023-45159 High 8.4 1E Client installer can perform arbitrary file deletion on protected files 0.2%