Read the docs

Plunet

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Plunet records in CISA KEV

No Plunet vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Business Manager 2 records LOW

Records

4 records

TI-2026-01976 CVE-2026-2337 · GHSA-wcq7-39gh-x6jv

Refleccted XSS on Plunet BusinessManager

Priority MEDIUM 46

A vulnerability in Plunet Plunet BusinessManager allows session hijacking, data theft, unauthorized actions on behalf of the user.This issue affects Plunet BusinessManager: 10.15.1.

CVSS 4.0HIGH 8.7 Network No auth User interaction EPSS 0.00378 Published 2026-02-11 Fixed in 10.22.3 CWE-79
TI-2026-01981 CVE-2026-2344 · GHSA-qphx-26ch-3x8j

Stored XSS on Plunet BusinessManager

Priority LOW 37

A vulnerability in Plunet Plunet BusinessManager allows unauthorized actions being performed on behalf of privileged users.This issue affects Plunet BusinessManager: 10.15.1

CVSS 4.0HIGH 8.6 Network Low privileges User interaction EPSS 0.00278 Published 2026-02-11 Fixed in 10.20 CWE-79
TI-2009-00667 CVE-2009-0700 · GHSA-6h2q-7gh7-pc6c

Plunet BusinessManager 4.1 and earlier allows remote authenticated users to bypass access…

Priority LOW 24

Plunet BusinessManager 4.1 and earlier allows remote authenticated users to bypass access restrictions and (1) read sensitive Customer or Order data via a modified Pfad parameter to pagesUTF8/Sys_DirAnzeige.jsp, or (2) l…

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.02511 Published 2009-02-23 No fix listed CWE-264
TI-2009-00666 CVE-2009-0699 · GHSA-rjc8-j2rv-vwfj

Cross-site scripting (XSS) vulnerability in pagesUTF8/auftrag_allgemeinauftrag.jsp in…

Priority LOW 19

Cross-site scripting (XSS) vulnerability in pagesUTF8/auftrag_allgemeinauftrag.jsp in Plunet BusinessManager 4.1 and earlier allows remote authenticated users to inject arbitrary web script or HTML via the (1) QUB and (2…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.01263 Published 2009-02-23 No fix listed CWE-79
Open these records in search →