Read the docs

Surfer

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Surfer records in CISA KEV

No Surfer vulnerabilities are listed in CISA KEV.

Records

4 records

Priority HIGH 66

Missing Authorization vulnerability in Surfer Surfer surferseo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Surfer: from n/a through <= 1.3.2.357.

CVSS 3.1HIGH 7.6 Network Low privileges No interaction EPSS 0.00605 Published 2024-12-13 No fix listed CWE-862
Priority LOW 34

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Surfer Surfer surferseo allows SQL Injection.This issue affects Surfer: from n/a through <= 1.5.0.502.

CVSS 3.1HIGH 7.6 Network High privileges No interaction EPSS 0.00418 Published 2024-10-17 No fix listed CWE-89
Priority LOW 30

Missing Authorization vulnerability in Surfer Surfer surferseo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Surfer: from n/a through <= 1.6.4.574.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00273 Published 2025-09-03 No fix listed CWE-862
Priority LOW 24

Missing Authorization vulnerability in Surfer Surfer surferseo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Surfer: from n/a through 1.8.0.744.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00168 Published 2026-10-19 No fix listed CWE-862
Open these records in search →