Otalio

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Otalio records in CISA KEV

No Otalio vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2025-08445 CVE-2025-9210 · GHSA-83h2-xpgj-mf4q

Missing JSON Web Token signature validation in Otalio Ship Property Management System

LOW 37

Missing signature validation in JSON Web Tokens in Otalio Ship Property Management System versions before 2.22.0 allows authenticated attackers to escalate privileges via tampering with JWTs

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00257 Published 2026-08-18 Fixed in 2.22.0 CWE-347

TI-2025-08446 CVE-2025-9211 · GHSA-2482-vx42-rm68

Cross-site scripting in Otalio Ship Property Management System

LOW 32

Unescaped stored values in application security page in Otalio Ship Property Management System versions before 2.22.0 allows authenticated attackers to escalate privileges via persistent cross-site scripting

CVSS 3.1MEDIUM 6.7 Network High privileges No interaction EPSS 0.0047 Published 2026-08-18 Fixed in 2.22.0 CWE-79

Open these records in search →

Critical	0
High	1
Medium	1
Low	0
No CVSS	0