https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2019-12314.htmlhttps://patchthecve.com/cve/CVE-2019-12314.htmlWed, 17 Jun 2026 02:14:26 +0000CRITICAL 9.8: Deltek Maconomy 2.2.5 is prone to local file inclusion via absolute path traversal in the WS.macx1.W_MCS/ PATH_INFO, as demonstrated by a cgi-bin/Maconomy/MaconomyWS.macx1.W_MCS/etc/passwd URI.https://patchthecve.com/cve/CVE-2018-18251.htmlhttps://patchthecve.com/cve/CVE-2018-18251.htmlWed, 17 Jun 2026 01:46:53 +0000CRITICAL 9.8: Deltek Vision 7.x before 7.6 permits the execution of any attacker supplied SQL statement through a custom RPC over HTTP protocol. The Vision system relies on the client binary to enforce security rules and integrity of SQL statements and other content being sent to the server. Client HTTP calls canhttps://patchthecve.com/cve/CVE-2018-20221.htmlhttps://patchthecve.com/cve/CVE-2018-20221.htmlWed, 17 Jun 2026 01:52:28 +0000HIGH 8.8: Secure/SAService.rem in Deltek Ajera Timesheets 9.10.16 and prior are vulnerable to remote code execution via deserialization of untrusted user input from an authenticated user. The executed code will run as the IIS Application Pool that is running the application.