Softwareag

Records13All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical5CVSS 9.0–10.0

CVSS high4CVSS 7.0–8.9

Exploited now

Softwareag records in CISA KEV

No Softwareag vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Mashzone Nextgen 4 records MEDIUM Aris 2 records LOW Connx 2 records LOW Quartz 2 records HIGH Webmethods 2 records MEDIUM Terracotta Server Oss 1 record MEDIUM

Records

2 records in Aris · all components

TI-2025-41061 CVE-2025-66837 · GHSA-9f4w-fmcx-4c8w

A file upload vulnerability in ARIS 10.0.23.0.3587512 allows attackers to execute…

LOW 30

A file upload vulnerability in ARIS 10.0.23.0.3587512 allows attackers to execute arbitrary code via uploading a crafted PDF file/Malware

CVSS 3.1MEDIUM 6.8 Network No auth User interaction EPSS 0.00301 Published 2026-01-07 No fix listed CWE-434

TI-2025-41062 CVE-2025-66838 · GHSA-2xw3-m2wf-5r5m

In Aris v10.0.23.0.3587512 and before, the file upload functionality does not enforce any…

LOW 29

In Aris v10.0.23.0.3587512 and before, the file upload functionality does not enforce any rate limiting or throttling, allowing users to upload files at an unrestricted rate.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00364 Published 2026-01-07 No fix listed CWE-770

Open these records in search →

Critical	5
High	4
Medium	4
Low	0
No CVSS	0