Vendors / Altium Records 22 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 13
CVSS high 6
Exploited now Altium records in CISA KEV No Altium vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 40
A stored cross-site scripting (XSS) vulnerability exists in the Altium Forum due to missing server-side input sanitization in forum post content.
CVSS 3.1 CRITICAL 9.0· Network · Low privileges · User interaction · EPSS 0.00238 · Published 2026-01-15 · No fix listed CWE-284
Priority LOW 33
A stored cross-site scripting (XSS) vulnerability exists in the user profile text fields of Altium 365.
CVSS 3.1 HIGH 7.6· Network · Low privileges · User interaction · EPSS 0.00237 · Published 2026-01-15 · No fix listed CWE-79
Priority LOW 27
A stored cross-site scripting (XSS) vulnerability exists in the Altium Support Center AddComment endpoint due to missing server-side input sanitization.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00285 · Published 2026-01-15 · No fix listed CWE-116
Open these records in search → All records by CVSS severity
13 6 3 0 0
