Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Vembu Technologies BDRSuite 7.6.0 Clear all filters
TI-2025-44007 CVE-2025-71452 · GHSA-vrjh-j947-6q7h

Cross-site scripting in Vembu BDRSuite restore progress page

Priority LOW 23

Vembu BDRSuite before 7.6.0 contains an unauthenticated cross-site scripting vulnerability in templates/progress/clientside/restoreprogress.sgp that allows remote attackers to inject arbitrary JavaScript by manipulating…

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.0029 Published 2026-11-03 Fixed in 7.6.0 CWE-79
TI-2025-44006 CVE-2025-71451 · GHSA-8cj8-qq8j-g68q

Cross-site scripting in Vembu BDRSuite via serverbackupprogress.sgp

Priority MEDIUM 56

Vembu BDRSuite before 7.6.0 contains an unauthenticated cross-site scripting vulnerability in templates/progress/serverside/serverbackupprogress.sgp that allows remote attackers to inject arbitrary JavaScript by manipula…

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.0029 Published 2026-11-03 Fixed in 7.6.0 CWE-79