Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: Fabasoft Clear all filters
TI-2026-63951 CVE-2026-97155 · GHSA-9hhv-69vm-5vcw

Origin validation error in Fabasoft Folio Client

Priority LOW 28

Fabasoft Folio Client before 2026, a locally installed component that communicates with the Fabasoft browser extension via web messaging, does not restrict which web origins may invoke its functions by default.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00112 Published 2026-09-24 Fixed in 2026 CWE-346
TI-2014-06286 CVE-2014-7560 · GHSA-79m3-h4qw-vxvj

The Fabasoft Cloud (aka com.fabasoft.android.cmis.folio_cloud) application 3.0.1 for…

Priority LOW 24

The Fabasoft Cloud (aka com.fabasoft.android.cmis.folio_cloud) application 3.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensi…

CVSS 2.0MEDIUM 5.4 Adjacent network No auth Interaction — EPSS 0.00266 Published 2014-10-20 No fix listed CWE-310