Vendors / FileZ Records 3 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0 CVSS 9.0–10.0
CVSS high 0 CVSS 7.0–8.9
Exploited now FileZ records in CISA KEV No FileZ vulnerabilities are listed in CISA KEV.
Priority LOW 25
A cross-site scripting vulnerability was reported in the FileZ client that could allow execution of code if a crafted url is visited by a local user.
CVSS 4.0 MEDIUM 5.1· Local · Low privileges · User interaction · EPSS 0.00194 · Published 2025-04-25 · Fixed in 11.0.0.10 CWE-79
Priority LOW 22
An improper XML parsing vulnerability was reported in the FileZ client that could allow arbitrary file reads on the system if a crafted url is visited by a local user.
CVSS 4.0 MEDIUM 5.1· Local · Low privileges · User interaction · EPSS 0.00145 · Published 2025-04-25 · Fixed in 11.0.0.10 CWE-611
Priority LOW 22
An open redirect vulnerability was reported in the FileZ client that could allow information disclosure if a crafted url is visited by a local user.
CVSS 4.0 MEDIUM 5.1· Local · Low privileges · User interaction · EPSS 0.00148 · Published 2025-04-25 · Fixed in 11.0.0.10 CWE-601
Open these records in search → All records by CVSS severity
Critical0 High0 Medium3 Low0 No CVSS0