Read the docs

ARKETEAM

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

ARKETEAM records in CISA KEV

No ARKETEAM vulnerabilities are listed in CISA KEV.

Records

5 records

TI-2025-43991 CVE-2025-68394 · GHSA-gv4v-v96x-4hxr

SQL injection in ARKETEAM Protectel modules

Priority LOW 38

ARKETEAM Protectel modules PROTECTELMAJ and BDF are vulnerable to SQL injection vulnerability.

CVSS 4.0HIGH 8.4 Adjacent network High privileges No interaction EPSS 0.00204 Published 2026-10-30 Fixed in 6.5.19, 6.4.67 CWE-89
TI-2025-43990 CVE-2025-68393 · GHSA-fxxw-wh9q-438c

SQL injection in ARKETEAM Protectel modules

Priority LOW 38

ARKETEAM Protectel modules PROTECTELMAJ and BDF are vulnerable to SQL injection vulnerability.

CVSS 4.0HIGH 8.4 Adjacent network High privileges No interaction EPSS 0.00204 Published 2026-10-30 Fixed in 6.5.19, 6.4.67 CWE-89
TI-2025-43988 CVE-2025-68391 · GHSA-gpmv-mc28-9pq5

Arbitrary file upload in ARKETEAM Protectel modules

Priority LOW 24

ARKETEAM Protectel modules PROTECTELMAJ and BDF are vulnerable to arbitrary file upload.

CVSS 4.0MEDIUM 5.3 Adjacent network No auth No interaction EPSS 0.00235 Published 2026-10-30 Fixed in 6.5.19, 6.4.67 CWE-434
TI-2025-43992 CVE-2025-68395 · GHSA-vqgh-jhr9-j5c3

Stored XSS in ARKETEAM Protectel note editor

Priority LOW 23

ARKETEAM Protectel modules PROTECTELMAJ and BDF contain a note editor module vulnerable to Stored XSS.

CVSS 4.0MEDIUM 5.1 Adjacent network No auth User interaction EPSS 0.00248 Published 2026-10-30 Fixed in 6.5.19, 6.4.67 CWE-79
TI-2025-43989 CVE-2025-68392 · GHSA-wj65-7rfx-mrhj

Incorrect authorization in ARKETEAM Protectel allows privilege misuse

Priority LOW 22

ARKETEAM Protectel modules PROTECTELMAJ and BDF allow low privileged users to use some of the functionalities reserved for admin users by forging direct requests to a specific endpoint.

CVSS 4.0MEDIUM 5.1 Adjacent network Low privileges No interaction EPSS 0.00167 Published 2026-10-30 Fixed in 6.5.19, 6.4.67 CWE-863
Open these records in search →