Vendors / YSoft Records 7 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0 CVSS 9.0–10.0
CVSS high 4 CVSS 7.0–8.9
Exploited now YSoft records in CISA KEV No YSoft vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 72
A Local Privilege Escalation issue was discovered in Y Soft SAFEQ 6 Build 53.
CVSS 3.1 HIGH 8.4· Local · No auth · No interaction · EPSS 0.00485 · Published 2024-10-22 · No fix listed CWE-306
Priority MEDIUM 60
Multiple Stored Cross-Site Scripting vulnerabilities were discovered in Y Soft SAFEQ 6 Build 53.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00521 · Published 2024-10-22 · No fix listed CWE-79
Priority LOW 38
YSoft SafeQ Server 6 allows a replay attack.
CVSS 3.0 HIGH 8.1· Network · No auth · No interaction · EPSS 0.01196 · Published 2019-03-19 · No fix listed CWE-294
Priority LOW 34
An issue was discovered in YSoft SAFEQ 6 before 6.0.72.
CVSS 3.1 HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00393 · Published 2022-09-06 · No fix listed
Priority LOW 34
Incorrect privileges in the MU55 FlexiSpooler service in YSoft SafeQ 6 6.0.55 allows local user privilege escalation by overwriting the executable file via an alternative data stream.
CVSS 3.1 HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2021-07-14 · No fix listed CWE-732
Priority LOW 29
An issue was discovered in YSoft SAFEQ 6 Server before 6.0.82.
CVSS 3.1 MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00341 · Published 2023-07-13 · No fix listed CWE-319
Priority LOW 23
Y Soft SafeQ 6 renders the Workflow Connector password field in a way that allows an administrator with UI access to reveal the value using browser developer/inspection tools.
CVSS 4.0 MEDIUM 5.1· Network · High privileges · No interaction · EPSS 0.0034 · Published 2026-01-14 · Fixed in MU106 CWE-549
Open these records in search → All records by CVSS severity
Critical0 High4 Medium3 Low0 No CVSS0