Vulnerabilities

TI-2024-36825 CVE-2024-55401 · GHSA-cq6j-g5c4-jjxp

An issue in 4C Strategies Exonaut before v22.4 allows attackers to execute a directory traversal.

LOW 29

An issue in 4C Strategies Exonaut before v22.4 allows attackers to execute a directory traversal.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00517 Published 2025-08-07 No fix listed CWE-22

TI-2025-29355 CVE-2025-46660 · GHSA-gvxw-cj6r-74wg

LOW 24

An issue was discovered in 4C Strategies Exonaut 21.6.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00379 Published 2025-08-06 No fix listed CWE-922

TI-2025-29354 CVE-2025-46659 · GHSA-qjv9-j535-99f6

LOW 33

An issue was discovered in ExonautWeb in 4C Strategies Exonaut 21.6.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00393 Published 2025-08-06 No fix listed CWE-200

TI-2024-36826 CVE-2024-55402 · GHSA-rqcv-w73r-r6v4

LOW 24

4C Strategies Exonaut before v22.4 was discovered to contain an access control issue.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00358 Published 2025-08-06 No fix listed CWE-284

TI-2024-36824 CVE-2024-55399 · GHSA-4595-c522-xw7r

LOW 29

4C Strategies Exonaut before v21.6.2.1-1 was discovered to contain a Server-Side Request Forgery (SSRF).

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00305 Published 2025-08-06 No fix listed CWE-918

TI-2024-36823 CVE-2024-55398 · GHSA-5hg4-qm9c-6fq5

LOW 29

4C Strategies Exonaut before v22.4 was discovered to contain insecure permissions.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00305 Published 2025-08-06 No fix listed CWE-276

TI-2025-29353 CVE-2025-46658 · GHSA-gm5j-3328-742c

MEDIUM 49

An issue was discovered in ExonautWeb in 4C Strategies Exonaut 21.6.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00421 Published 2025-08-05 No fix listed CWE-209