What’s Vulnerable › Vulnerabilities

CVE-2022-47879

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 6.3% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2023-05-12 · updated 2026-07-09
• Weakness: CWE-94

Description

A Remote Code Execution (RCE) vulnerability in /be/rpc.php in Jedox 2020.2.5 allows remote authenticated users to load arbitrary PHP classes from the 'rtn' directory and execute its methods. NOTE: The vendor states that the vulnerability affects installations running version 22.5 or earlier. The issue was resolved with version 23.2 and later versions are not affected.

Affected products

• Jedox: 2020.2.5
• Jedox Cloud: all versions

References

• https://docs.syslifters.com/assets/vulnerability-disclosure/Vulnerability-Disclosure-Jedox-Jedox-04-2023.pdf
• https://jedox.mantishub.io/app/issues/57236
• https://jedox.mantishub.io/app/issues/57237
• https://jedox.mantishub.io/app/issues/57238
• https://jedox.mantishub.io/app/issues/57239
• https://docs.syslifters.com/assets/vulnerability-disclosure/Vulnerability-Disclosure-Jedox-Jedox-04-2023.pdf

Get alerted when CVE-2022-47879 or the next vulnerability affects your stack