4D Server.exe vulnerabilities

Latest 4D Server.exe CVEs

Newest publication first

1. CVE-2023-4770 Uncontrolled Search Path Element Vulnerability in 4D and 4D Windows Server

   Published 2023-11-30

   High·CVSS 7.8 EPSS 0.26%

   An uncontrolled search path element vulnerability has been found on 4D and 4D server Windows executables applications, affecting version 19 R8 100218. This vulnerability consists in a DLL hijacking by replacing x64 shfolder.dll in the installation path, causing an arbitrary code...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.