Opensagres

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Opensagres records in CISA KEV

No Opensagres vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Xdocreport 2 records HIGH

Records

2 records in Xdocreport · all components

TI-2025-40368 CVE-2025-65482 · GHSA-7jc7-g598-2p64

An XML External Entity (XXE) vulnerability in opensagres XDocReport v0.9.2 to v2.0.3…

HIGH 82

An XML External Entity (XXE) vulnerability in opensagres XDocReport v0.9.2 to v2.0.3 allows attackers to execute arbitrary code via uploading a crafted .docx file.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0057 Published 2026-01-20 Fixed in 2.0.4 CWE-611

TI-2025-39540 CVE-2025-64087 · GHSA-r8w2-w357-9pjv

A Server-Side Template Injection (SSTI) vulnerability in the FreeMarker component of…

HIGH 82

A Server-Side Template Injection (SSTI) vulnerability in the FreeMarker component of opensagres XDocReport v1.0.0 to v2.1.0 allows attackers to execute arbitrary code via injecting crafted template expressions.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00586 Published 2026-01-20 Fixed in 2.2.0 CWE-1336

Open these records in search →

Critical	2
High	0
Medium	0
Low	0
No CVSS	0