Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Vendor: INTUMIT Clear all filters
TI-2025-03141 CVE-2025-3572 · GHSA-4g3w-2657-gjq5

INTUMIT SmartRobot - Server-Side Request Forgery

Priority LOW 39

SmartRobot from INTUMIT has a Server-Side Request Forgery vulnerability, allowing unauthenticated remote attackers to probe internal network and even access arbitrary local files on the server.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00477 Published 2025-04-14 Fixed in 8.0.0 CWE-918
TI-2024-11737 CVE-2024-12652 · GHSA-jfx8-86f7-x4h2

Intumit SmartRobot′s Conversational AI Platform - Improper Control of Generation of Code ('Code Injection')

Priority MEDIUM 47

A Improper Control of Generation of Code ('Code Injection') vulnerability in groovy script function in SmartRobot′s Conversational AI Platform before v7.2.0 allows remote authenticated users to perform arbitrary system c…

CVSS 4.0CRITICAL 9.3 Network High privileges No interaction EPSS 0.00779 Published 2024-12-26 Fixed in v7.2.0 CWE-94
TI-2024-08142 CVE-2024-8776 · GHSA-36p3-3fj3-g9p5

INTUMIT SmartRobot - Cross-site Scripting

Priority LOW 27

SmartRobot from INTUMIT does not properly validate a specific page parameter, allowing unautheticated remote attackers to inject JavaScript code to the parameter for Reflected Cross-site Scripting attacks.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00305 Published 2024-09-16 Fixed in 7.1.0 CWE-79
TI-2024-00510 CVE-2024-0552 · GHSA-4354-qq9g-jmhv

Intumit inc. SmartRobot - Remote Code Execution

Priority MEDIUM 45

Intumit inc. SmartRobot's web framwork has a remote code execution vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01179 Published 2024-01-15 No fix listed CWE-1395