Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: Adata Clear all filters
TI-2025-37903 CVE-2025-61075 · GHSA-7r8m-v3x4-crwv

Multiple Incorrect Access Control vulnerabilities in adata Software GmbH…

Priority LOW 38

Multiple Incorrect Access Control vulnerabilities in adata Software GmbH Mitarbeiterportal 2.15.2.0 allow remote authenticated, low-privileged users to carry out administrative functions and manipulate data of other user…

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.0054 Published 2025-12-09 No fix listed CWE-639
TI-2025-37902 CVE-2025-61074 · GHSA-cvcm-ff4r-6q38

A stored Cross Site Scripting (XSS) vulnerability in the bulletin board (SchwarzeBrett)…

Priority LOW 21

A stored Cross Site Scripting (XSS) vulnerability in the bulletin board (SchwarzeBrett) in adata Software GmbH Mitarbeiter Portal 2.15.2.0 allows remote authenticated users to execute arbitrary JavaScript code in the web…

CVSS 3.1MEDIUM 4.6 Network Low privileges User interaction EPSS 0.00342 Published 2025-12-09 No fix listed CWE-79