Read the docs

VertiGIS Ltd.

Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

VertiGIS Ltd. records in CISA KEV

No VertiGIS Ltd. vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Fm 2 records HIGH Weboffice 1 record LOW

Records

2 records in Fm · all components

TI-2026-00330 CVE-2026-0522 · GHSA-v2gh-2f53-p2w4

Local File Inclusion in the File Upload/Download Process

Priority HIGH 68

A local file inclusion vulnerability in the upload/download flow of the VertiGIS FM application allows authenticated attackers to read arbitrary files from the server by manipulating a file's path during its upload.

CVSS 4.0HIGH 7.4 Network Low privileges No interaction EPSS 0.00619 Published 2026-04-01 Fixed in 10.11.363 CWE-610
TI-2026-03356 CVE-2026-3877 · GHSA-mc25-w9g7-hq9v

Reflected Cross-Site Scripting in Dashboard Search

Priority HIGH 67

A reflected cross-site scripting (XSS) vulnerability in the dashboard search functionality of the VertiGIS FM solution allows attackers to craft a malicious URL, that if visited by an authenticated victim, will execute a…

CVSS 4.0HIGH 7.3 Network No auth User interaction EPSS 0.00187 Published 2026-04-01 Fixed in 10.13.403 CWE-79
Open these records in search →