Vulnerabilities

TI-2025-35383 CVE-2025-56590 · GHSA-j34c-g9jq-8cr8

An issue was discovered in the InsertFromURL() function of the Apryse HTML2PDF SDK thru…

HIGH 82

An issue was discovered in the InsertFromURL() function of the Apryse HTML2PDF SDK thru 11.10.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00535 Published 2026-01-22 No fix listed CWE-78

TI-2025-35382 CVE-2025-56589 · GHSA-rgvv-mq36-9qv7

A Local File Inclusion (LFI) and a Server-Side Request Forgery (SSRF) vulnerability was…

HIGH 72

A Local File Inclusion (LFI) and a Server-Side Request Forgery (SSRF) vulnerability was found in the InsertFromHtmlString() function of the Apryse HTML2PDF SDK thru 11.6.0.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00485 Published 2026-01-22 No fix listed CWE-918

TI-2024-37840 CVE-2024-57240 · GHSA-cx28-78m7-h38f

A Cross-Site Scripting (XSS) vulnerability in the Rendering Engine component in Apryse…

LOW 24

A Cross-Site Scripting (XSS) vulnerability in the Rendering Engine component in Apryse WebViewer v11.1 and earlier allows attackers to execute arbitrary code via a crafted PDF file.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00277 Published 2025-03-03 No fix listed CWE-79

TI-2024-04030 CVE-2024-4327 · GHSA-g666-fcvg-24h3

Apryse WebViewer PDF Document cross site scripting

MEDIUM 50

A vulnerability was found in Apryse WebViewer up to 10.8.0.

CVSS 3.1LOW 3.5 Network Low privileges User interaction EPSS 0.00456 Published 2024-04-30 No fix listed CWE-79

TI-2023-05782 CVE-2023-6299 · GHSA-j3q7-2r25-q5j7

Apryse iText Reference Table PdfDocument.java memory leak

LOW 31

A vulnerability, which was classified as problematic, has been found in Apryse iText 8.0.1.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00942 Published 2023-11-26 No fix listed CWE-401

TI-2023-05781 CVE-2023-6298 · GHSA-3g98-4f8c-vh63

Apryse iText PdfDocument.java main array index