Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Vendor: ARKETEAM Clear all filters
TI-2025-43992 CVE-2025-68395 · GHSA-vqgh-jhr9-j5c3

Stored XSS in ARKETEAM Protectel note editor

Priority LOW 23

ARKETEAM Protectel modules PROTECTELMAJ and BDF contain a note editor module vulnerable to Stored XSS.

CVSS 4.0MEDIUM 5.1 Adjacent network No auth User interaction EPSS 0.00248 Published 2026-10-30 Fixed in 6.5.19, 6.4.67 CWE-79
TI-2025-43991 CVE-2025-68394 · GHSA-gv4v-v96x-4hxr

SQL injection in ARKETEAM Protectel modules

Priority LOW 38

ARKETEAM Protectel modules PROTECTELMAJ and BDF are vulnerable to SQL injection vulnerability.

CVSS 4.0HIGH 8.4 Adjacent network High privileges No interaction EPSS 0.00204 Published 2026-10-30 Fixed in 6.5.19, 6.4.67 CWE-89
TI-2025-43990 CVE-2025-68393 · GHSA-fxxw-wh9q-438c

SQL injection in ARKETEAM Protectel modules

Priority LOW 38

ARKETEAM Protectel modules PROTECTELMAJ and BDF are vulnerable to SQL injection vulnerability.

CVSS 4.0HIGH 8.4 Adjacent network High privileges No interaction EPSS 0.00204 Published 2026-10-30 Fixed in 6.5.19, 6.4.67 CWE-89
TI-2025-43989 CVE-2025-68392 · GHSA-wj65-7rfx-mrhj

Incorrect authorization in ARKETEAM Protectel allows privilege misuse

Priority LOW 22

ARKETEAM Protectel modules PROTECTELMAJ and BDF allow low privileged users to use some of the functionalities reserved for admin users by forging direct requests to a specific endpoint.

CVSS 4.0MEDIUM 5.1 Adjacent network Low privileges No interaction EPSS 0.00167 Published 2026-10-30 Fixed in 6.5.19, 6.4.67 CWE-863
TI-2025-43988 CVE-2025-68391 · GHSA-gpmv-mc28-9pq5

Arbitrary file upload in ARKETEAM Protectel modules

Priority LOW 24

ARKETEAM Protectel modules PROTECTELMAJ and BDF are vulnerable to arbitrary file upload.

CVSS 4.0MEDIUM 5.3 Adjacent network No auth No interaction EPSS 0.00235 Published 2026-10-30 Fixed in 6.5.19, 6.4.67 CWE-434