Read the docs

Fabasoft

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Fabasoft records in CISA KEV

No Fabasoft vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Cloud 1 record LOW Cloud Enterprise Client 1 record LOW Fabasoft Cloud 1 record LOW Fabasoft Cloud Enterprise Client 1 record LOW Folio / Egov-suite 1 record LOW

Records

4 records

TI-2026-63951 CVE-2026-97155 · GHSA-9hhv-69vm-5vcw

Origin validation error in Fabasoft Folio Client

Priority LOW 28

Fabasoft Folio Client before 2026, a locally installed component that communicates with the Fabasoft browser extension via web messaging, does not restrict which web origins may invoke its functions by default.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00112 Published 2026-09-24 Fixed in 2026 CWE-346
TI-2014-06286 CVE-2014-7560 · GHSA-79m3-h4qw-vxvj

The Fabasoft Cloud (aka com.fabasoft.android.cmis.folio_cloud) application 3.0.1 for…

Priority LOW 24

The Fabasoft Cloud (aka com.fabasoft.android.cmis.folio_cloud) application 3.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensi…

CVSS 2.0MEDIUM 5.4 Adjacent network No auth Interaction — EPSS 0.00266 Published 2014-10-20 No fix listed CWE-310
Open these records in search →