Precurio

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Precurio records in CISA KEV

No Precurio vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Intranet Portal 1 record HIGH Precurio 1 record MEDIUM

Records

3 records

TI-2026-25437 CVE-2026-32989 · GHSA-48jf-r2hq-f5gw

Precurio Intranet Portal 4.4: Cross-Site Request Forgery leading to arbitrary file upload

HIGH 72

Precurio Intranet Portal 4.4 contains a cross-site request forgery vulnerability that allows attackers to induce authenticated users to submit crafted requests to a profile update endpoint handling file uploads.

CVSS 4.0HIGH 8.6 Network No auth User interaction EPSS 0.00223 Published 2026-03-20 No fix listed CWE-352

TI-2018-15393 CVE-2018-25168 · GHSA-r2h3-j8v9-wx8v

Precurio Intranet Portal 2.0 Cross-Site Request Forgery Add Admin

MEDIUM 57

Precurio Intranet Portal 2.0 contains a cross-site request forgery vulnerability that allows unauthenticated attackers to create administrative user accounts by submitting crafted POST requests.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00259 Published 2026-03-06 No fix listed CWE-434

TI-2016-08797 CVE-2016-10759 · GHSA-pj6v-2vhx-c87w

The Xinha plugin in Precurio 2.1 allows Directory Traversal, with resultant arbitrary…

MEDIUM 48

The Xinha plugin in Precurio 2.1 allows Directory Traversal, with resultant arbitrary code execution, via ExtendedFileManager/Classes/ExtendedFileManager.php because ExtendedFileManager can be used to rename the .htacces…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03652 Published 2019-05-24 No fix listed CWE-22

Open these records in search →

Critical	1
High	1
Medium	1
Low	0
No CVSS	0