Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Release: Akinsoft OctoCloud v1.11.01 Clear all filters
TI-2025-02128 CVE-2025-2414 · GHSA-vf28-wj7x-vmfp

OTP Bypass in Akinsoft's OctoCloud

Priority MEDIUM 43

Improper Restriction of Excessive Authentication Attempts vulnerability in Akinsoft OctoCloud allows Authentication Bypass.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00346 Published 2025-09-02 Fixed in v1.11.01 CWE-307
TI-2025-00540 CVE-2025-0640 · GHSA-m6fw-wp2g-jwwp

IDOR in Akinsoft's OctoCloud

Priority LOW 21

Authorization Bypass Through User-Controlled Key vulnerability in Akinsoft OctoCloud allows Resource Leak Exposure.

CVSS 3.1MEDIUM 4.7 Network High privileges No interaction EPSS 0.00239 Published 2025-09-02 Fixed in v1.11.01 CWE-639
TI-2024-12024 CVE-2024-12973 · GHSA-gh7p-w9vc-3vfj

Host Header Injection in Akinsoft's OctoCloud

Priority LOW 21

Origin Validation Error vulnerability in Akinsoft OctoCloud allows HTTP Response Splitting, CAPEC - 87 - Forceful Browsing.

CVSS 3.1MEDIUM 4.7 Network High privileges No interaction EPSS 0.00147 Published 2025-09-02 Fixed in v1.11.01 CWE-346
TI-2024-12023 CVE-2024-12972 · GHSA-mwf5-j2jc-7f3h

XSS in Akinsoft's OctoCloud

Priority LOW 19

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Akinsoft OctoCloud allows Cross-Site Scripting (XSS).

CVSS 3.1MEDIUM 4.3 Network High privileges User interaction EPSS 0.0019 Published 2025-09-02 Fixed in v1.11.01 CWE-79