CronosWeb i2A

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

CronosWeb i2A records in CISA KEV

No CronosWeb i2A vulnerabilities are listed in CISA KEV.

1 record

TI-2025-27543 CVE-2025-41358 · GHSA-m4jr-5r4g-w2vh

LOW 36

Direct Object Reference Vulnerability (IDOR) in i2A's CronosWeb, in versions prior to 25.00.00.12, inclusive.

CVSS 4.0HIGH 8.3 Network Low privileges No interaction EPSS 0.00337 Published 2025-12-10 No fix listed CWE-639