Srimax

Records2All Threatist records

Exploited (KEV)1In CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Srimax records in CISA KEV

TI-2025-20644 Srimax Output Messenger Directory Traversal Vulnerability CRITICAL 95KEV 2025-05-19

Components

Products in the NVD configurations · select one to filter the records

Output Messenger 2 records CRITICAL

Records

2 records

TI-2025-20644 CVE-2025-27920 · GHSA-66q6-24vw-2g98

Path traversal in Srimax Output Messenger

CRITICAL 95KEV

Output Messenger before 2.0.63 was vulnerable to a directory traversal attack through improper file path handling.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01898 Published 2025-05-05 Fixed in 2.0.63 CWE-24

TI-2025-20645 CVE-2025-27921 · GHSA-h8x6-pcq3-5wvw

A reflected cross-site scripting (XSS) vulnerability was discovered in Output Messenger…

LOW 27

A reflected cross-site scripting (XSS) vulnerability was discovered in Output Messenger before 2.0.63, where unsanitized input could be injected into the web application’s response.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00385 Published 2025-05-05 No fix listed CWE-79

Open these records in search →

Critical	0
High	1
Medium	1
Low	0
No CVSS	0