Anapi

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Anapi records in CISA KEV

No Anapi vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

H6web 2 records LOW

Records

2 records

TI-2025-01084 CVE-2025-1270 · GHSA-3j4c-6c9j-p6jj

Insecure direct object reference (IDOR) vulnerability in H6Web

LOW 39

Insecure direct object reference (IDOR) vulnerability in Anapi Group's h6web, allows an authenticated attacker to access other users' information by making a POST request and modifying the “pkrelated” parameter in the “/…

CVSS 3.1CRITICAL 9.1 Network Low privileges No interaction EPSS 0.00359 Published 2025-02-13 No fix listed CWE-639

TI-2025-01085 CVE-2025-1271 · GHSA-3889-h6mq-grhq

Reflected Cross-Site Scripting (XSS) vulnerability in H6Web

LOW 27

Reflected Cross-Site Scripting (XSS) in Anapi Group's h6web.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00286 Published 2025-02-13 No fix listed CWE-79

Open these records in search →

Critical	1
High	0
Medium	1
Low	0
No CVSS	0