Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
Kiotviet records in CISA KEVNo Kiotviet vulnerabilities are listed in CISA KEV.
Priority LOW 37
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Kiotviet KiotViet Sync allows SQL Injection.
CVSS 3.1HIGH 8.5· Network · Low privileges · No interaction · EPSS 0.00433 · Published 2025-04-17 · No fix listed CWE-89
Priority LOW 30
Cross-Site Request Forgery (CSRF) vulnerability in Kiotviet KiotViet Sync allows Stored XSS.
CVSS 3.1HIGH 7.1· Network · No auth · User interaction · EPSS 0.00152 · Published 2025-04-24 · No fix listed CWE-352
Priority LOW 19
Missing Authorization vulnerability in Kiotviet KiotViet Sync kiotvietsync allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects KiotViet Sync: from n/a through <= 1.8.5.
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00188 · Published 2025-10-27 · No fix listed CWE-862
