Zucchetti

Records22All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high11CVSS 7.0–8.9

Exploited now

Zucchetti records in CISA KEV

No Zucchetti vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Helpdeskadvanced 10 records MEDIUM Ad Hoc Infinity 5 records HIGH Infobusiness 4 records MEDIUM Hr Portal 1 record LOW Imagicle Uc Suite 1 record MEDIUM Infinity Zmaintenance 1 record LOW Infinity Zucchetti 1 record LOW

Records

1 record in Infinity Zucchetti · all components

TI-2025-37994 CVE-2025-61431 · GHSA-4qqm-257h-w336

A reflected cross-site scripted (XSS) vulnerability in the /jsp/gsfr_feditorHTML.jsp…

LOW 27

A reflected cross-site scripted (XSS) vulnerability in the /jsp/gsfr_feditorHTML.jsp endpoint of Zucchetti ZMaintenance Infinity and Infinity Zucchetti v4.1 and earlier allows attackers to execute arbitrary Javascript in…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00202 Published 2025-11-04 No fix listed CWE-79

Open these records in search →

Critical	1
High	11
Medium	10
Low	0
No CVSS	0