Vendors / 4D Records 14 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 6
Exploited now 4D records in CISA KEV No 4D vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 44
Unauthenticated attackers can exploit a weakness in the XML parser functionality of the SOAP endpoints in 4D server.
CVSS 4.0 HIGH 8.7· Network · No auth · No interaction · EPSS 0.00447 · Published 2026-04-30 · Fixed in v20 R7 CWE-611
Priority LOW 35
A broken authentication vulnerability in 4D SAS 4D Server software v17, v18, v19 R7, and earlier allows attackers to send crafted TCP packets containing requests to perform arbitrary actions.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.01123 · Published 2023-06-16 · No fix listed CWE-287
Priority LOW 35
An information disclosure vulnerability in 4D SAS 4D Server Application v17, v18, v19 R7 and earlier allows attackers to retrieve password hashes for all users via eavesdropping.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.01168 · Published 2023-06-16 · No fix listed CWE-295
Priority LOW 34
An uncontrolled search path element vulnerability has been found on 4D and 4D server Windows executables applications, affecting version 19 R8 100218.
CVSS 3.1 HIGH 7.8· Local · No auth · User interaction · EPSS 0.00261 · Published 2023-11-30 · No fix listed CWE-427
Open these records in search → All records by CVSS severity
0 6 7 1 0
THREATIST.IORead the docs