Read the docs

SoftCOM

Records11All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

SoftCOM records in CISA KEV

No SoftCOM vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Iksoris 10 records LOW

Records

10 records in Iksoris · all components

TI-2024-33191 CVE-2024-49705 · GHSA-mhgm-r3r5-6cwp

XSS in iKSORIS

Priority LOW 24

Internet Starter, one of SoftCOM iKSORIS system modules, is vulnerable to client-side Denial of Servise (DoS) attacks.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00332 Published 2025-04-14 Fixed in 79.0 CWE-248
TI-2024-09350 CVE-2024-10087 · GHSA-j848-rv24-jm27

XSS in iKSORIS

Priority LOW 24

Internet Starter, one of SoftCOM iKSORIS system modules, is vulnerable to Reflected XSS (Cross-site Scripting) attacks.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.0025 Published 2025-04-14 Fixed in 79.0 CWE-79
TI-2024-33194 CVE-2024-49708 · GHSA-cmwr-c23h-p93f

XSS in iKSORIS

Priority LOW 23

Internet Starter, one of SoftCOM iKSORIS system modules, is vulnerable to Stored XSS (Cross-site Scripting) attacks.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00236 Published 2025-04-14 Fixed in 79.0 CWE-79
TI-2024-33193 CVE-2024-49707 · GHSA-7rcm-6m36-qrf5

XSS in iKSORIS

Priority LOW 23

Internet Starter, one of SoftCOM iKSORIS system modules, is vulnerable to Reflected XSS (Cross-site Scripting) attacks.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00249 Published 2025-04-14 Fixed in 79.0 CWE-79
TI-2024-33192 CVE-2024-49706 · GHSA-rpmh-5wh2-6x37

XSS in iKSORIS

Priority LOW 23

Internet Starter, one of SoftCOM iKSORIS system modules, is vulnerable to Open Redirect attacks by including base64 encoded URLs in the target parameter sent in a POST request to one of the endpoints.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00332 Published 2025-04-14 Fixed in 79.0 CWE-601
TI-2024-12639 CVE-2024-13598 · GHSA-vrc8-xx22-hwgx

XSS in iKSORIS

Priority LOW 23

Internet Starter, one of SoftCOM iKSORIS system modules, is vulnerable to Reflected XSS (Cross-site Scripting) attacks.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00249 Published 2025-04-14 Fixed in 79.0 CWE-79
TI-2024-09353 CVE-2024-10090 · GHSA-x45f-24vr-952q

XSS in iKSORIS

Priority LOW 23

Internet Starter, one of SoftCOM iKSORIS system modules, is vulnerable to Reflected XSS (Cross-site Scripting) attacks.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00249 Published 2025-04-14 Fixed in 79.0 CWE-79
TI-2024-09352 CVE-2024-10089 · GHSA-h34x-fr9h-4xrf

XSS in iKSORIS

Priority LOW 23

Internet Starter, one of SoftCOM iKSORIS system modules, is vulnerable to Stored XSS (Cross-site Scripting) attacks.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00236 Published 2025-04-14 Fixed in 79.0 CWE-79
TI-2024-09351 CVE-2024-10088 · GHSA-ph7p-prrv-6wj5

XSS in iKSORIS

Priority LOW 23

Internet Starter, one of SoftCOM iKSORIS system modules, is vulnerable to Reflected XSS (Cross-site Scripting) attacks.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00249 Published 2025-04-14 Fixed in 79.0 CWE-79
TI-2024-33195 CVE-2024-49709 · GHSA-95gw-69j9-7r85

XSS in iKSORIS

Priority LOW 11

Internet Starter, one of SoftCOM iKSORIS system modules, allows for setting an arbitrary session cookie value.

CVSS 4.0LOW 2.3 Network No auth User interaction EPSS 0.00219 Published 2025-04-14 Fixed in 79.0 CWE-384
Open these records in search →