kivitendo

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

kivitendo records in CISA KEV

No kivitendo vulnerabilities are listed in CISA KEV.

1 record

TI-2025-40815 CVE-2025-66370 · GHSA-6p6f-w7vp-pv39

LOW 23

Kivitendo before 3.9.2 allows XXE injection.

CVSS 3.1MEDIUM 5.0 Network Low privileges No interaction EPSS 0.0035 Published 2025-11-28 Fixed in 3.9.2 CWE-611