Inflectra

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Inflectra records in CISA KEV

No Inflectra vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records

TI-2024-32432 CVE-2024-48590 · GHSA-pvrp-6fjq-x9rj

MEDIUM 50

Inflectra SpiraTeam 7.2.00 is vulnerable to Server-Side Request Forgery (SSRF) via the NewsReaderService.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00856 Published 2025-03-20 No fix listed CWE-918

TI-2024-32433 CVE-2024-48591 · GHSA-whf8-w5vj-q4w6

LOW 28

Inflectra SpiraTeam 7.2.00 is vulnerable to Cross Site Scripting (XSS).

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00452 Published 2025-03-20 No fix listed CWE-79