CVE-2022-47879

A Remote Code Execution (RCE) vulnerability in /be/rpc.php in Jedox 2020.2.5 allows remote authenticated users to load arbitrary PHP classes from the 'rtn' directory and execute its methods. NOTE: The vendor states that the vulnerability affects installations running version 22.5 or earlier. The issue was resolved with version 23.2 and later versions are not affected.

• CWE-94

• https://docs.syslifters.com/assets/vulnerability-disclosure/Vulnerability-Disclosure-Jedox-Jedox-04-2023.pdfExploit, Third Party Advisory
• https://jedox.mantishub.io/app/issues/57236
• https://jedox.mantishub.io/app/issues/57237
• https://jedox.mantishub.io/app/issues/57238
• https://jedox.mantishub.io/app/issues/57239
• https://docs.syslifters.com/assets/vulnerability-disclosure/Vulnerability-Disclosure-Jedox-Jedox-04-2023.pdfExploit, Third Party Advisory

Published

May 12, 2023

Last Modified

Jul 9, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-47873Netcad KEOS 1.0 is vulnerable to XML External Entity (XXE) r…9.8
• CVE-2022-47874Improper Access Control in /tc/rpc in Jedox GmbH Jedox 2020.…6.5
• CVE-2022-47875A Directory Traversal vulnerability in /be/erpc.php in Jedox…8.8
• CVE-2022-47876The integrator in Jedox GmbH Jedox 2020.2.5 allows remote au…8.8
• CVE-2022-47877A Stored cross-site scripting vulnerability in Jedox 2020.2.…5.4
• CVE-2022-47878Incorrect input validation for the default-storage-path in t…8.8
• CVE-2022-4788The Embed PDF WordPress plugin through 1.0.6 does not valida…5.4
• CVE-2022-47880An Information disclosure vulnerability in /be/rpc.php in Je…5.3
• CVE-2022-47881Foxit PDF Reader and PDF Editor 11.2.1.53537 and earlier has…6.5
• CVE-2022-4789The WPZOOM Portfolio WordPress plugin before 1.2.2 does not …5.4
• CVE-2022-47891All versions of NetMan 204 allow an attacker that knows the …8.8
• CVE-2022-47892All versions of NetMan 204 could allow an unauthenticated re…7.5