CVE-2018-10207: Vaultize Enterprise File Sharing

Medium severity, CVSS 5.3. EPSS: 1% chance of exploitation in the next 30 days.

An issue was discovered in Vaultize Enterprise File Sharing 17.05.31. An attacker can exploit Missing Authorization on the FlexPaperViewer SWF reader, and export files that should have been restricted, via vectors involving page-by-page access to a document in SWF format.

Affected products

• Vaultize Enterprise File Sharing: version 17.05.31 only

Published 2018-04-25. Last modified 2026-06-17.