Read the docs

Vxsearch

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

Vxsearch records in CISA KEV

No Vxsearch vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

4 records

Priority HIGH 72

VX Search 13.5.28 contains an unquoted service path vulnerability in both VX Search Server and VX Search Enterprise services that allows local attackers to escalate privileges.

CVSS 4.0HIGH 8.5 Local Low privileges No interaction EPSS 0.00121 Published 2026-05-16 No fix listed CWE-428
Priority HIGH 72

VX Search 10.6.18 contains a local buffer overflow vulnerability that allows attackers to overwrite the instruction pointer by supplying an oversized string in the directory field.

CVSS 4.0HIGH 8.6 Local No auth No interaction EPSS 0.00148 Published 2026-05-17 No fix listed CWE-120
Priority HIGH 69

VX Search v13.8 and v14.7 was discovered to contain an unquoted service path vulnerability which allows attackers to execute arbitrary commands at elevated privileges via a crafted executable file.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00378 Published 2023-03-16 No fix listed CWE-428
Open these records in search →