CVE-2021-38697: Softvibe Saraban

Critical severity, CVSS 9.8. EPSS: 2.7% chance of exploitation in the next 30 days.

SoftVibe SARABAN for INFOMA 1.1 allows Unauthenticated unrestricted File Upload, that allows attackers to upload files with any file extension which can lead to arbitrary code execution.

Affected products

• Softvibe Saraban: version 1.1 only

Published 2022-01-18. Last modified 2026-06-17.