Census

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Census records in CISA KEV

No Census vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

4 records in Csweb · all components

TI-2025-37868 CVE-2025-60949 · GHSA-2926-f789-68jv

MEDIUM 48

Census CSWeb 8.0.1 allows "app/config" to be reachable via HTTP in some deployments.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00412 Published 2026-03-23 Fixed in 8.1.0 alpha CWE-200

TI-2025-37866 CVE-2025-60947 · GHSA-8q99-w8jg-3w74

MEDIUM 40

Census CSWeb 8.0.1 allows arbitrary file upload.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00536 Published 2026-03-23 Fixed in 8.1.0 alpha CWE-434

TI-2025-37865 CVE-2025-60946 · GHSA-q4rc-c232-4f3v

MEDIUM 40

Census CSWeb 8.0.1 allows arbitrary file path input.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00497 Published 2026-03-23 Fixed in 8.1.0 alpha CWE-22

TI-2025-37867 CVE-2025-60948 · GHSA-32px-r229-cx92

LOW 23

Census CSWeb 8.0.1 allows stored cross-site scripting in user supplied fields.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00214 Published 2026-03-23 Fixed in 8.1.0 alpha CWE-79