Vendors / Surfer Records 4 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0 CVSS 9.0–10.0
CVSS high 2 CVSS 7.0–8.9
Exploited now Surfer records in CISA KEV No Surfer vulnerabilities are listed in CISA KEV.
Priority HIGH 66
Missing Authorization vulnerability in Surfer Surfer surferseo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Surfer: from n/a through <= 1.3.2.357.
CVSS 3.1 HIGH 7.6· Network · Low privileges · No interaction · EPSS 0.00605 · Published 2024-12-13 · No fix listed CWE-862
Priority LOW 34
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Surfer Surfer surferseo allows SQL Injection.This issue affects Surfer: from n/a through <= 1.5.0.502.
CVSS 3.1 HIGH 7.6· Network · High privileges · No interaction · EPSS 0.00418 · Published 2024-10-17 · No fix listed CWE-89
Priority LOW 30
Missing Authorization vulnerability in Surfer Surfer surferseo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Surfer: from n/a through <= 1.6.4.574.
CVSS 3.1 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00273 · Published 2025-09-03 · No fix listed CWE-862
Priority LOW 24
Missing Authorization vulnerability in Surfer Surfer surferseo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Surfer: from n/a through 1.8.0.744.
CVSS 3.1 MEDIUM 5.4· Network · Low privileges · No interaction · EPSS 0.00168 · Published 2026-10-19 · No fix listed CWE-862
Open these records in search → All records by CVSS severity
Critical0 High2 Medium2 Low0 No CVSS0