Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

6 records

Vendor: Ragic Component: Enterprise Cloud Database Clear all filters
TI-2025-13699 CVE-2025-15016 · GHSA-x9qh-8h86-936g

Ragic｜Enterprise Cloud Database - Hard-coded Cryptographic Key

Priority MEDIUM 49

Enterprise Cloud Database developed by Ragic has a Hard-coded Cryptographic Key vulnerability, allowing unauthenticated remote attackers to exploit the fixed key to generate verification information and log into the syst…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00529 Published 2025-12-22 No fix listed CWE-321
TI-2025-13698 CVE-2025-15015 · GHSA-qhjv-vvf7-w9xf

Ragic｜Enterprise Cloud Database - Arbitrary File Read

Priority MEDIUM 45

Enterprise Cloud Database developed by Ragic has a Arbitrary File Read vulnerability, allowing unauthenticated remote attackers to exploit Relative Path Traversal to download arbitrary system files.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00609 Published 2025-12-22 No fix listed CWE-23
TI-2024-09268 CVE-2024-9985 · GHSA-9jqp-827w-wpmw

Ragic Enterprise Cloud Database - Arbitrary File Upload

Priority MEDIUM 44

Enterprise Cloud Database from Ragic does not properly validate the file type for uploads.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00649 Published 2024-10-15 Fixed in 2024/08/08 09:45:25 CWE-434
TI-2024-09267 CVE-2024-9984 · GHSA-qw66-2q7h-vq76

Ragic Enterprise Cloud Database - Missing Authentication

Priority MEDIUM 50

Enterprise Cloud Database from Ragic does not authenticate access to specific functionality, allowing unauthenticated remote attackers to use this functionality to obtain any user's session cookie.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00571 Published 2024-10-15 Fixed in 2024/08/08 09:45:25 CWE-306
TI-2024-09266 CVE-2024-9983 · GHSA-7f7q-jm58-6f8f

Ragic Enterprise Cloud Database - Arbitrary File Read through Path Traversal

Priority MEDIUM 40

Enterprise Cloud Database from Ragic does not properly validate a specific page parameter, allowing unauthenticated remote attackers to exploit this vulnerability to read arbitrary system files.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00666 Published 2024-10-15 Fixed in 2024/08/08 09:45:25 CWE-23
TI-2023-21940 CVE-2023-41343 · GHSA-jr92-46c3-hhcf

Ragic No-Code Database Builder - Stored XSS

Priority LOW 25

Rogic No-Code Database Builder's file uploading function has insufficient filtering for special characters.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00429 Published 2023-11-03 No fix listed CWE-79