CVE-2022-27192: Asseco Dvs Avilys

High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days.

The Reporting module in Aseco Lietuva document management system DVS Avilys before 3.5.58 allows unauthorized file download. An unauthenticated attacker can impersonate an administrator by reading administrative files.

Affected products

• Asseco Dvs Avilys: before 3.5.58 (fixed in 3.5.58)

Published 2022-03-23. Last modified 2026-06-17.