Records146All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical30CVSS 9.0–10.0
CVSS high43CVSS 7.0–8.9
Exploited now
1Panel-dev records in CISA KEVNo 1Panel-dev vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority HIGH 82
CordysCRM 1.4.1 is vulnerable to SQL Injection in the employee list query interface (/user/list) via the departmentIds parameter.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00379 · Published 2026-02-12 · No fix listed CWE-89
Open these records in search →