Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: DECE Software Clear all filters
TI-2025-05472 CVE-2025-6060 · GHSA-77j8-jpqg-v9f6

XSS in DECE Software's Geodi

Priority LOW 24

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in DECE Software Geodi allows Cross-Site Scripting (XSS).

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.0021 Published 2025-07-29 Fixed in GEODI Setup 9.0.146 CWE-79
TI-2025-05585 CVE-2025-6175 · GHSA-f6hp-9pq5-mm4g

CRLF Injection in DECE Software's Geodi

Priority LOW 37

Improper Neutralization of CRLF Sequences ('CRLF Injection') vulnerability in DECE Software Geodi allows HTTP Request Splitting.

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00239 Published 2025-07-29 Fixed in GEODI Setup 9.0.146 CWE-93
TI-2023-05537 CVE-2023-6011 · GHSA-c56h-x6xg-p9c7

Stored XSS in Geodi

Priority LOW 25

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in DECE Software Geodi allows Stored XSS.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00388 Published 2023-11-22 Fixed in 8.0.0.27396 CWE-79
TI-2023-05453 CVE-2023-5921 · GHSA-qm72-9j6p-39q3

Function Bypass in Geodi

Priority LOW 31

Improper Enforcement of Behavioral Workflow vulnerability in DECE Software Geodi allows Functionality Bypass.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00248 Published 2023-11-22 Fixed in 8.0.0.27396 CWE-841