Dolusoft

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Dolusoft records in CISA KEV

No Dolusoft vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

3 records

TI-2025-07069 CVE-2025-7744 · GHSA-w4rr-5gq9-rrv7

MEDIUM 49

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Dolusoft Omaspot allows SQL Injection.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00351 Published 2025-09-16 Fixed in 12.09.2025 CWE-89

TI-2025-07068 CVE-2025-7743 · GHSA-mqh9-cp66-hp3g

MEDIUM 42

Cleartext Transmission of Sensitive Information vulnerability in Dolusoft Omaspot allows Interception, Privilege Escalation.

CVSS 3.1CRITICAL 9.6 Adjacent network No auth No interaction EPSS 0.00161 Published 2025-09-16 Fixed in 12.09.2025 CWE-319

TI-2025-05973 CVE-2025-6575 · GHSA-hhc9-2298-6fcr

LOW 27

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Dolusoft Omaspot allows Reflected XSS.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00246 Published 2025-09-16 Fixed in 12.09.2025 CWE-79