Read the docs

DECE Software

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

DECE Software records in CISA KEV

No DECE Software vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Geodi 1 record LOW

Records

4 records

TI-2025-05585 CVE-2025-6175 · GHSA-f6hp-9pq5-mm4g

CRLF Injection in DECE Software's Geodi

Priority LOW 37

Improper Neutralization of CRLF Sequences ('CRLF Injection') vulnerability in DECE Software Geodi allows HTTP Request Splitting.

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00239 Published 2025-07-29 Fixed in GEODI Setup 9.0.146 CWE-93
TI-2023-05453 CVE-2023-5921 · GHSA-qm72-9j6p-39q3

Function Bypass in Geodi

Priority LOW 31

Improper Enforcement of Behavioral Workflow vulnerability in DECE Software Geodi allows Functionality Bypass.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00248 Published 2023-11-22 Fixed in 8.0.0.27396 CWE-841
TI-2023-05537 CVE-2023-6011 · GHSA-c56h-x6xg-p9c7

Stored XSS in Geodi

Priority LOW 25

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in DECE Software Geodi allows Stored XSS.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00388 Published 2023-11-22 Fixed in 8.0.0.27396 CWE-79
TI-2025-05472 CVE-2025-6060 · GHSA-77j8-jpqg-v9f6

XSS in DECE Software's Geodi

Priority LOW 24

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in DECE Software Geodi allows Cross-Site Scripting (XSS).

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.0021 Published 2025-07-29 Fixed in GEODI Setup 9.0.146 CWE-79
Open these records in search →