Read the docs

SABBATIC

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

SABBATIC records in CISA KEV

No SABBATIC vulnerabilities are listed in CISA KEV.

Records

5 records

TI-2026-82362 CVE-2026-5700 · GHSA-6vcp-wwhw-vp55

Stored cross-site scripting in SABBATIC app

Priority LOW 22

Stored Cross-Site Scripting (XSS) vulnerability in SABBATIC application that allows an attacker to store JavaScript code so that when a user views the page, code can be executed in the victim's browser.

CVSS 4.0MEDIUM 4.8 Network Low privileges User interaction EPSS 0.003 Published 2026-10-29 No fix listed CWE-79
TI-2026-82361 CVE-2026-5699 · GHSA-qx7c-rf9h-6rrg

Stored cross-site scripting in SABBATIC app through company name

Priority LOW 22

Stored Cross-Site Scripting (XSS) vulnerability in SABBATIC application that allows an attacker to store JavaScript code so that when a user views the page, code can be executed in the victim's browser.

CVSS 4.0MEDIUM 4.8 Network Low privileges User interaction EPSS 0.003 Published 2026-10-29 No fix listed CWE-79
TI-2026-82360 CVE-2026-5698 · GHSA-5w45-2rcm-53hv

Stored cross-site scripting in SABBATIC app

Priority LOW 22

Stored Cross-Site Scripting (XSS) vulnerability in SABBATIC application that allows an attacker to store JavaScript code so that when a user views the page, code can be executed in the victim's browser.

CVSS 4.0MEDIUM 4.8 Network Low privileges User interaction EPSS 0.003 Published 2026-10-29 No fix listed CWE-79
TI-2026-82359 CVE-2026-5697 · GHSA-6c6m-3wfw-4pj6

Stored cross-site scripting in SABBATIC app via the nombre parameter

Priority LOW 22

Stored Cross-Site Scripting (XSS) vulnerability in SABBATIC application that allows an attacker to store JavaScript code so that when a user views the page, code can be executed in the victim's browser.

CVSS 4.0MEDIUM 4.8 Network Low privileges User interaction EPSS 0.003 Published 2026-10-29 No fix listed CWE-79
TI-2026-82363 CVE-2026-5702 · GHSA-3pwq-x9rx-xp23

Cross-site request forgery in SABBATIC app

Priority LOW 21

Cross-Site Request Forgery (CSRF) vulnerability in SABBATIC application that allows an attacker can trick an authenticated user into clicking a malicious link or loading a page that sends unauthorized requests to a vulne…

CVSS 4.0MEDIUM 4.8 Network Low privileges User interaction EPSS 0.00177 Published 2026-10-29 No fix listed CWE-352
Open these records in search →