Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: Altitude Clear all filters
TI-2025-27433 CVE-2025-41083 · GHSA-2hff-rr39-hph8

Improper Neutralization in Altitude Communication Server

Priority LOW 30

Vulnerability in Altitude Authentication Service and Altitude Communication Server v8.5.3290.0 by Altitude, where manipulation of Host header in HTTP requests allows redirection to an arbitrary URL or modification of the…

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00582 Published 2026-01-26 No fix listed CWE-74
TI-2025-27432 CVE-2025-41082 · GHSA-67vw-jjgw-xcvq

HTTP Request/Response Smuggling in Altitude Communication Server

Priority LOW 37

Illegal HTTP request traffic vulnerability (CL.0) in Altitude Communication Server, caused by inconsistent analysis of multiple HTTP requests over a single Keep-Alive connection using Content-Length headers.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00428 Published 2026-01-26 No fix listed CWE-444