Read the docs

FPT Software

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

FPT Software records in CISA KEV

No FPT Software vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Nightwolf Penetration Testing Platform 1 record LOW

Records

4 records

TI-2025-02629 CVE-2025-3014 · GHSA-fjwx-r7wp-67pf

Insecure direct object references (IDOR) in NightWolf Penetration Platform

Priority LOW 36

Insecure Direct Object References (IDOR) in access control in Tracking 2.1.4 on NightWolf Penetration Testing allows an attacker to access via manipulating request parameters or object references.

CVSS 4.0HIGH 8.3 Network Low privileges No interaction EPSS 0.00323 Published 2025-03-31 Fixed in 2.1.5 CWE-285
TI-2025-02628 CVE-2025-3013 · GHSA-cqr3-h8cv-gwg3

Insecure direct object references (IDOR) in NightWolf Penetration Platform

Priority LOW 36

Insecure Direct Object References (IDOR) in access control in Customer Portal before 2.1.4 on NightWolf Penetration Testing allows an attacker to access via manipulating request parameters or object references.

CVSS 4.0HIGH 8.3 Network Low privileges No interaction EPSS 0.00323 Published 2025-03-31 Fixed in 2.1.5 CWE-285
TI-2025-22411 CVE-2025-31165 · GHSA-5rqf-7xxv-3745

Cross Site Scripting in NightWolf Penetration Platform

Priority LOW 31

Cross-Site Scripting (XSS) vulnerability in the Logbug module of NightWolf Penetration Testing Platform 1.2.2 allows attackers to execute JavaScript through the markdown editor feature.

CVSS 4.0MEDIUM 6.9 Network Low privileges User interaction EPSS 0.00368 Published 2025-03-27 Fixed in 1.2.3 CWE-79
Open these records in search →