https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2019-12311.htmlhttps://patchthecve.com/cve/CVE-2019-12311.htmlWed, 17 Jun 2026 02:14:24 +0000MEDIUM 6.1: Sandline Centraleyezer (On Premises) allows Unrestricted File Upload leading to Stored XSS. An HTML page running a script could be uploaded to the server. When a victim tries to download a CISO Report template, the script is loaded.https://patchthecve.com/cve/CVE-2019-12299.htmlhttps://patchthecve.com/cve/CVE-2019-12299.htmlWed, 17 Jun 2026 02:14:23 +0000MEDIUM 6.1: Sandline Centraleyezer (On Premises) allows Stored XSS using HTML entities in the name field of the Category section.https://patchthecve.com/cve/CVE-2019-12271.htmlhttps://patchthecve.com/cve/CVE-2019-12271.htmlWed, 17 Jun 2026 02:14:20 +0000CRITICAL 9.8: Sandline Centraleyezer (On Premises) allows unrestricted File Upload with a dangerous type, because the feature of adding ".jpg" to any uploaded filename is not enforced on the server side.