Read the docs

Serosoft

Records8All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Serosoft records in CISA KEV

No Serosoft vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

7 records in Academia Student Information System · all components

Priority MEDIUM 47

Incorrect access control in the component /rest/staffResource/findAllUsersAcrossOrg of Serosoft Solutions Pvt Ltd Academia Student Information System (SIS) EagleR v1.0.118 allows create and modify user accounts, includin…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00354 Published 2025-03-03 No fix listed CWE-862
Priority LOW 37

Incorrect access control in the component /rest/staffResource/update of Serosoft Solutions Pvt Ltd Academia Student Information System (SIS) EagleR v1.0.118 allows create and modify user accounts, including an Administra…

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00364 Published 2025-03-03 No fix listed CWE-284
Priority LOW 29

An Insecure Direct Object References (IDOR) in the component /getStudemtAllDetailsById?studentId=XX of Serosoft Solutions Pvt Ltd Academia Student Information System (SIS) EagleR v1.0.118 allows attackers to access sensi…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00364 Published 2025-03-03 No fix listed CWE-639
Priority LOW 24

A stored cross-site scripting (XSS) vulnerability in Serosoft Solutions Pvt Ltd Academia Student Information System (SIS) EagleR v1.0.118 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00218 Published 2025-03-03 No fix listed CWE-79
Priority LOW 24

A stored cross-site scripting (XSS) vulnerability in Serosoft Solutions Pvt Ltd Academia Student Information System (SIS) EagleR v1.0.118 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00218 Published 2025-03-03 No fix listed CWE-79
Open these records in search →