Vendors / ITFlow Records 3 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 1
Exploited now ITFlow records in CISA KEV No ITFlow vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 60
Cross Site Scripting vulnerability in ITFlow.org before commit v.432488eca3998c5be6b6b9e8f8ba01f54bc12378 allows a remtoe attacker to execute arbitrary code and obtain sensitive information via the settings.php, settings…
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00741 · Published 2024-02-26 · No fix listed CWE-79
Priority MEDIUM 56
An SQL injection vulnerability in Itflow through 25.06 has been identified in the "role_id" parameter when editing a profile.
CVSS 3.1 MEDIUM 4.9· Network · High privileges · No interaction · EPSS 0.00285 · Published 2026-01-15 · No fix listed CWE-89
Open these records in search → All records by CVSS severity
0 1 2 0 0
