Read the docs

i-PRO Co., Ltd.

Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

i-PRO Co., Ltd. records in CISA KEV

No i-PRO Co., Ltd. vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Video Insight 4 records LOW

Records

7 records

TI-2026-26743 CVE-2026-34488 · GHSA-j3m8-qm5j-mgwc

Uncontrolled search path in i-PRO Co., Ltd. IP Setting Software

Priority LOW 32

IP Setting Software contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries.

CVSS 4.0HIGH 7.0 Local Low privileges User interaction EPSS 0.00144 Published 2026-04-23 Fixed in V5.20 CWE-427
TI-2023-20833 CVE-2023-39938 · GHSA-9xmx-5fhh-h6g9

Cross-site scripting in i-PRO Co., Ltd. VI Web Client

Priority LOW 28

Reflected cross-site scripting vulnerability in VI Web Client prior to 7.9.6 allows a remote unauthenticated attacker to inject an arbitrary script.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00508 Published 2023-09-05 Fixed in 7.9.6 CWE-79
TI-2023-19949 CVE-2023-38574 · GHSA-px6p-g8xc-79wp

Open redirect in i-PRO Co., Ltd. VI Web Client

Priority LOW 28

Open redirect vulnerability in VI Web Client prior to 7.9.6 allows a remote unauthenticated attacker to redirect users to arbitrary web sites and conduct phishing attacks via a specially crafted URL.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00496 Published 2023-09-05 Fixed in 7.9.6 CWE-601
TI-2023-21490 CVE-2023-40705 · GHSA-p826-jfjm-j89v

Cross-site scripting in i-PRO Co., Ltd. VI Web Client

Priority LOW 25

Stored cross-site scripting vulnerability in Map setting page of VI Web Client prior to 7.9.6 allows a remote authenticated attacker to inject an arbitrary script.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00441 Published 2023-09-05 Fixed in 7.9.6 CWE-79
TI-2023-21343 CVE-2023-40535 · GHSA-4hfp-q9wp-2m98

Cross-site scripting in i-PRO Co., Ltd. VI Web Client

Priority LOW 25

Stored cross-site scripting vulnerability in View setting page of VI Web Client prior to 7.9.6 allows a remote authenticated attacker to inject an arbitrary script.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00441 Published 2023-09-05 Fixed in 7.9.6 CWE-79
Open these records in search →