Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: Census Component: Csweb Clear all filters
TI-2025-37868 CVE-2025-60949 · GHSA-2926-f789-68jv

Census CSWeb leaked configuration files

Priority MEDIUM 48

Census CSWeb 8.0.1 allows "app/config" to be reachable via HTTP in some deployments.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00412 Published 2026-03-23 Fixed in 8.1.0 alpha CWE-200
TI-2025-37867 CVE-2025-60948 · GHSA-32px-r229-cx92

Census CSWeb stored XSS

Priority LOW 23

Census CSWeb 8.0.1 allows stored cross-site scripting in user supplied fields.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00214 Published 2026-03-23 Fixed in 8.1.0 alpha CWE-79
TI-2025-37866 CVE-2025-60947 · GHSA-8q99-w8jg-3w74

Census CSWeb arbitrary file upload

Priority MEDIUM 40

Census CSWeb 8.0.1 allows arbitrary file upload.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00536 Published 2026-03-23 Fixed in 8.1.0 alpha CWE-434
TI-2025-37865 CVE-2025-60946 · GHSA-q4rc-c232-4f3v

Census CSWeb path traversal

Priority MEDIUM 40

Census CSWeb 8.0.1 allows arbitrary file path input.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00497 Published 2026-03-23 Fixed in 8.1.0 alpha CWE-22