Read the docs

Energycrm

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Energycrm records in CISA KEV

No Energycrm vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Energy Crm 3 records LOW

Records

3 records

TI-2025-27116 CVE-2025-40646 · GHSA-x85r-96xp-938j

Information disclosure in ViDay

Priority LOW 28

Exposure of sensitive information in Viday.

CVSS 4.0MEDIUM 5.9 Adjacent network No auth User interaction EPSS 0.00179 Published 2025-10-02 No fix listed CWE-200
TI-2025-27113 CVE-2025-40643 · GHSA-rx47-qmx4-g424

Stored Cross-Site Scripting (XSS) in Energy CRM by Status Tracker

Priority LOW 23

Stored Cross-Site Scripting (XSS) vulnerability in Energy CRM v2025 by Status Tracker Ltd, consisting of a stored XSS due to lack of proper validation of user input by sending a POST request to “/crm/create_job_submit.ph…

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00207 Published 2025-10-23 No fix listed CWE-79
TI-2025-27110 CVE-2025-40640 · GHSA-7ww2-w9pq-g2x8

Stored Cross-Site Scripting (XSS) in Energy CRM by Status Tracker

Priority LOW 23

Stored Cross-Site Scripting (XSS) vulnerability in Energy CRM v2025 by Status Tracker Ltd, consisting of a stored XSS due to lack of proper validation of user input by sending a POST request to “/crm/create_invoice_submi…

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00212 Published 2025-10-10 No fix listed CWE-79
Open these records in search →