What’s Vulnerable › Products

1E Platform vulnerabilities

6 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your 1E Platform version is affected

Latest 1E Platform vulnerabilities

• CVE-2025-1683 — Symbolic Link Exploit in 1E Client's - Nomad module allows Arbitrary File Deletion (CVSS 7.8)
• CVE-2024-7211 — The Duende Identity Server based component in 1E Platform may allow URL redirections to untrusted websites. (CVSS 6.1)
• CVE-2023-5964 — 1E-Exchange-DisplayMessage instruction allows for arbitrary code execution (CVSS 7.2)
• CVE-2023-45163 — 1E-Exchange-CommandLinePing instruction before v18.1 allows for arbitrary code execution (CVSS 7.2)
• CVE-2023-45161 — 1E-Exchange-URLResponseTime instruction before v20.1 allows arbitrary code execution (CVSS 7.2)
• CVE-2023-45162 — Blind SQL vulnerability in 1E platform (CVSS 9.8)