Read the docs

Galaxy Software Services

Records11All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical4CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9

Exploited now

Galaxy Software Services records in CISA KEV

No Galaxy Software Services vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Vitalsesp 5 records MEDIUM Iota C.ai 2 records MEDIUM Vitals Enterprise Social Platform 2 records MEDIUM

Records

2 records in Iota C.ai · all components

TI-2024-35441 CVE-2024-52959 · GHSA-26c6-c3h3-4qf7

iota C.ai Conversational Platform - Improper Control of Generation of Code ('Code Injection')

Priority MEDIUM 49

A Improper Control of Generation of Code ('Code Injection') vulnerability in plugin management in iota C.ai Conversational Platform from 1.0.0 through 2.1.3 allows remote authenticated users to perform arbitrary system c…

CVSS 4.0CRITICAL 9.3 Network High privileges No interaction EPSS 0.00562 Published 2024-11-27 No fix listed CWE-94
TI-2024-35440 CVE-2024-52958 · GHSA-jfcq-6qwc-xqvx

iota C.ai Conversational Platform - Improper Verification of Cryptographic Signature

Priority MEDIUM 42

A improper verification of cryptographic signature vulnerability in plugin management in iota C.ai Conversational Platform from 1.0.0 through 2.1.3 allows remote authenticated users to load a malicious DLL via upload plu…

CVSS 4.0CRITICAL 9.3 Network High privileges No interaction EPSS 0.00347 Published 2024-11-27 No fix listed CWE-347
Open these records in search →