Altitude

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Altitude records in CISA KEV

No Altitude vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Altitude Unified Customer Interaction 1 record LOW

Records

3 records

TI-2025-27432 CVE-2025-41082 · GHSA-67vw-jjgw-xcvq

HTTP Request/Response Smuggling in Altitude Communication Server

LOW 37

Illegal HTTP request traffic vulnerability (CL.0) in Altitude Communication Server, caused by inconsistent analysis of multiple HTTP requests over a single Keep-Alive connection using Content-Length headers.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00428 Published 2026-01-26 No fix listed CWE-444

TI-2025-27433 CVE-2025-41083 · GHSA-2hff-rr39-hph8

Improper Neutralization in Altitude Communication Server

LOW 30

Vulnerability in Altitude Authentication Service and Altitude Communication Server v8.5.3290.0 by Altitude, where manipulation of Host header in HTTP requests allows redirection to an arbitrary URL or modification of the…

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00582 Published 2026-01-26 No fix listed CWE-74

TI-2014-07479 CVE-2014-9212 · GHSA-754q-8q2g-4hf6

Multiple cross-site scripting (XSS) vulnerabilities in Altitude uAgent in Altitude uCI…

LOW 22

Multiple cross-site scripting (XSS) vulnerabilities in Altitude uAgent in Altitude uCI (Unified Customer Interaction) 7.5 allow remote attackers to inject arbitrary web script or HTML via (1) an email hyperlink or the (2…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01123 Published 2014-12-05 No fix listed CWE-79

Open these records in search →

Critical	0
High	0
Medium	3
Low	0
No CVSS	0