TI-2024-02241 CVE-2024-2413 · GHSA-gpg3-v7vj-4v8w
Intumit SmartRobot - Use of Hard-coded Cryptographic Key
Priority MEDIUM 50
Intumit SmartRobot uses a fixed encryption key for authentication.
INTUMIT
Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
INTUMIT records in CISA KEVNo INTUMIT vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
5 records in Smartrobot · all components
TI-2024-11737 CVE-2024-12652 · GHSA-jfx8-86f7-x4h2
Intumit SmartRobot′s Conversational AI Platform - Improper Control of Generation of Code ('Code Injection')
Priority MEDIUM 47
A Improper Control of Generation of Code ('Code Injection') vulnerability in groovy script function in SmartRobot′s Conversational AI Platform before v7.2.0 allows remote authenticated users to perform arbitrary system c…
TI-2024-00510 CVE-2024-0552 · GHSA-4354-qq9g-jmhv
Intumit inc. SmartRobot - Remote Code Execution
Priority MEDIUM 45
Intumit inc. SmartRobot's web framwork has a remote code execution vulnerability.
TI-2025-03141 CVE-2025-3572 · GHSA-4g3w-2657-gjq5
INTUMIT SmartRobot - Server-Side Request Forgery
Priority LOW 39
SmartRobot from INTUMIT has a Server-Side Request Forgery vulnerability, allowing unauthenticated remote attackers to probe internal network and even access arbitrary local files on the server.
TI-2024-08142 CVE-2024-8776 · GHSA-36p3-3fj3-g9p5
INTUMIT SmartRobot - Cross-site Scripting
Priority LOW 27
SmartRobot from INTUMIT does not properly validate a specific page parameter, allowing unautheticated remote attackers to inject JavaScript code to the parameter for Reflected Cross-site Scripting attacks.