Read the docs

pebas

Records8All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical4CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9

Exploited now

pebas records in CISA KEV

No pebas vulnerabilities are listed in CISA KEV.

Records

8 records

Priority MEDIUM 49

Incorrect Privilege Assignment vulnerability in pebas CouponXxL couponxxl allows Privilege Escalation.This issue affects CouponXxL: from n/a through <= 3.0.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00452 Published 2025-10-22 No fix listed CWE-266
Priority MEDIUM 49

Deserialization of Untrusted Data vulnerability in pebas CouponXxL couponxxl allows Object Injection.This issue affects CouponXxL: from n/a through <= 3.0.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00464 Published 2025-06-27 No fix listed CWE-502
Priority MEDIUM 49

Incorrect Privilege Assignment vulnerability in pebas CouponXL couponxl allows Privilege Escalation.This issue affects CouponXL: from n/a through <= 4.5.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00516 Published 2025-05-23 No fix listed CWE-266
Priority MEDIUM 46

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in pebas Lisfinity Core lisfinity-core allows SQL Injection.This issue affects Lisfinity Core: from n/a through <= 1.5.0.

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.00398 Published 2026-03-25 No fix listed CWE-89
Open these records in search →