Read the docs

PiExtract

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

PiExtract records in CISA KEV

No PiExtract vulnerabilities are listed in CISA KEV.

Records

3 records

TI-2025-02626 CVE-2025-3011 · GHSA-85x6-hj8x-gfch

PiExtract SOOP-CLM - SQL Injection

Priority MEDIUM 49

SOOP-CLM from PiExtract has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete database contents.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00531 Published 2025-03-31 No fix listed CWE-89
TI-2025-10703 CVE-2025-11673 · GHSA-79f4-vm9f-23qh

PiExtract |SOOP-CLM - Hidden Functionality

Priority MEDIUM 46

SOOP-CLM developed by PiExtract has a Hidden Functionality vulnerability, allowing privileged remote attackers to exploit a hidden functionality to execute arbitrary code on the server.

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.0058 Published 2025-10-13 No fix listed CWE-912
Priority LOW 30

SOOP-CLM developed by PiExtract has a Server-Side Request Forgery vulnerability, allowing privileged remote attackers to read server files or probe internal network information.

CVSS 4.0MEDIUM 6.9 Network High privileges No interaction EPSS 0.00358 Published 2025-10-13 No fix listed CWE-918
Open these records in search →