Read the docs

Sergestec

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Sergestec records in CISA KEV

No Sergestec vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Exito 3 records MEDIUM

Records

3 records in Exito · all components

TI-2025-27373 CVE-2025-41020 · GHSA-m8pw-9fx4-mvpr

Authorization bypass in Sergestec Exito

Priority LOW 31

Insecure direct object reference (IDOR) vulnerability in Sergestec's Exito v8.0.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00351 Published 2025-10-16 No fix listed CWE-639
TI-2025-27374 CVE-2025-41021 · GHSA-7xc6-7q94-gh44

Stored Cross-Site Scripting (XSS) vulnerability in Sergestec's Exito

Priority LOW 23

Stored Cross-Site Scripting (XSS) in Sergestec's Exito v8.0, consisting of a stored XSS due to a lack of proper validation of user input by sending a POST request using the 'obs' parameter in '/admin/index.php?action=pro…

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00282 Published 2025-10-16 No fix listed CWE-79
Open these records in search →