Vulnerabilities

TI-2025-09489 CVE-2025-10348 · GHSA-3f7x-5hc9-j6v5

Stored Cross-Site Scripting in URVE Smart Office

LOW 23

URVE Smart Office is vulnerable to Stored XSS in report problem functionality.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00353 Published 2025-10-30 Fixed in 1.1.24 CWE-79

TI-2025-24946 CVE-2025-36846 · GHSA-q9g9-363h-fq62

HIGH 82

An issue was discovered in Eveo URVE Web Manager 27.02.2025.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04852 Published 2025-07-21 No fix listed CWE-78

TI-2025-24945 CVE-2025-36845 · GHSA-7q67-hxcf-pvj7

HIGH 76

An issue was discovered in Eveo URVE Web Manager 27.02.2025.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.0175 Published 2025-07-21 No fix listed CWE-918

TI-2022-02235 CVE-2022-2420 · GHSA-x3j2-wmxh-24c7

HIGH 70

A vulnerability was found in URVE Web Manager.

CVSS 3.1HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.01127 Published 2022-07-15 No fix listed CWE-434

TI-2022-02234 CVE-2022-2419 · GHSA-q9gf-w74w-fcgj

HIGH 70

A vulnerability was found in URVE Web Manager.

CVSS 3.1HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.12792 Published 2022-07-15 No fix listed CWE-434

TI-2022-02233 CVE-2022-2418 · GHSA-f8c6-ggjx-ww44

HIGH 70

A vulnerability was found in URVE Web Manager.

CVSS 3.1HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.0115 Published 2022-07-15 No fix listed CWE-434