Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

9 records

TI-2025-00635 CVE-2025-0747 · GHSA-2p76-x4wh-x3c6

Stored Cross-Site vulnerability in EmbedAI

Priority MEDIUM 43

A Stored Cross-Site Scripting vulnerability has been found in EmbedAI.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00241 Published 2025-01-30 Fixed in 2.1 CWE-79
Priority LOW 39

An Improper Access Control vulnerability has been found in EmbedAI 2.1 and below.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00321 Published 2025-01-30 Fixed in 2.1 CWE-284
Priority LOW 39

an Improper Access Control vulnerability has been found in EmbedAI 2.1 and below.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00283 Published 2025-01-30 Fixed in 2.1 CWE-284
Priority LOW 30

An Improper Access Control vulnerability has been found in EmbedAI 2.1 and below.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00353 Published 2025-01-30 Fixed in 2.1 CWE-284
Priority LOW 35

An Improper Access Control vulnerability has been found in EmbedAI 2.1 and below.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0028 Published 2025-01-30 Fixed in 2.1 CWE-284
Priority LOW 32

An Improper Access Control vulnerability has been found in EmbedAI 2.1 and below.

CVSS 3.1MEDIUM 5.8 Network No auth No interaction EPSS 0.00246 Published 2025-01-30 Fixed in 2.1 CWE-284
Priority MEDIUM 43

An Improper Access Control vulnerability has been found in EmbedAI 2.1 and below.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00339 Published 2025-01-30 Fixed in 2.1 CWE-284
Priority MEDIUM 43

An Improper Access Control vulnerability has been found in EmbedAI 2.1 and below.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00339 Published 2025-01-30 Fixed in 2.1 CWE-284