Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: Dolusoft Clear all filters
TI-2025-07068 CVE-2025-7743 · GHSA-mqh9-cp66-hp3g

Sensitive Data Exposure in Dolusoft's Omaspot

Priority MEDIUM 42

Cleartext Transmission of Sensitive Information vulnerability in Dolusoft Omaspot allows Interception, Privilege Escalation.

CVSS 3.1CRITICAL 9.6 Adjacent network No auth No interaction EPSS 0.00161 Published 2025-09-16 Fixed in 12.09.2025 CWE-319
TI-2025-07069 CVE-2025-7744 · GHSA-w4rr-5gq9-rrv7

SQLi in Dolusoft's Omaspot

Priority MEDIUM 49

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Dolusoft Omaspot allows SQL Injection.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00351 Published 2025-09-16 Fixed in 12.09.2025 CWE-89
TI-2025-05973 CVE-2025-6575 · GHSA-hhc9-2298-6fcr

XSS in Dolusoft's Omaspot

Priority LOW 27

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Dolusoft Omaspot allows Reflected XSS.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00246 Published 2025-09-16 Fixed in 12.09.2025 CWE-79