Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Galaxy Software Services Component: Iota C.ai Clear all filters
TI-2024-35441 CVE-2024-52959 · GHSA-26c6-c3h3-4qf7

iota C.ai Conversational Platform - Improper Control of Generation of Code ('Code Injection')

Priority MEDIUM 49

A Improper Control of Generation of Code ('Code Injection') vulnerability in plugin management in iota C.ai Conversational Platform from 1.0.0 through 2.1.3 allows remote authenticated users to perform arbitrary system c…

CVSS 4.0CRITICAL 9.3 Network High privileges No interaction EPSS 0.00562 Published 2024-11-27 No fix listed CWE-94
TI-2024-35440 CVE-2024-52958 · GHSA-jfcq-6qwc-xqvx

iota C.ai Conversational Platform - Improper Verification of Cryptographic Signature

Priority MEDIUM 42

A improper verification of cryptographic signature vulnerability in plugin management in iota C.ai Conversational Platform from 1.0.0 through 2.1.3 allows remote authenticated users to load a malicious DLL via upload plu…

CVSS 4.0CRITICAL 9.3 Network High privileges No interaction EPSS 0.00347 Published 2024-11-27 No fix listed CWE-347