Galaxy Software Services

Records11All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical4CVSS 9.0–10.0

CVSS high5CVSS 7.0–8.9

Exploited now

Galaxy Software Services records in CISA KEV

No Galaxy Software Services vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Vitalsesp 5 records MEDIUM Iota C.ai 2 records MEDIUM Vitals Enterprise Social Platform 2 records MEDIUM

Records

2 records in Vitals Enterprise Social Platform · all components

TI-2023-18921 CVE-2023-37291 · GHSA-pf66-674w-hm6h

Galaxy Software Services Vitals ESP - Use of Hard-coded Cryptographic Key

MEDIUM 49

Galaxy Software Services Vitals ESP is vulnerable to using a hard-coded encryption key.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00454 Published 2023-07-21 No fix listed CWE-321

TI-2023-21954 CVE-2023-41357 · GHSA-68g4-f9x4-95f2

Galaxy Software Services Vitals ESP - Arbitrary File Upload

MEDIUM 42

Galaxy Software Services Corporation Vitals ESP is an online knowledge base management portal, it has insufficient filtering and validation during file upload.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00863 Published 2023-11-03 No fix listed CWE-434

Open these records in search →

Critical	4
High	5
Medium	2
Low	0
No CVSS	0