Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: PiExtract Clear all filters
TI-2025-10704 CVE-2025-11674 · GHSA-gg7w-cqcr-8h88

PiExtract｜SOOP-CLM - Server-Side Request Forgery

Priority LOW 30

SOOP-CLM developed by PiExtract has a Server-Side Request Forgery vulnerability, allowing privileged remote attackers to read server files or probe internal network information.

CVSS 4.0MEDIUM 6.9 Network High privileges No interaction EPSS 0.00358 Published 2025-10-13 No fix listed CWE-918
TI-2025-10703 CVE-2025-11673 · GHSA-79f4-vm9f-23qh

PiExtract ｜SOOP-CLM - Hidden Functionality

Priority MEDIUM 46

SOOP-CLM developed by PiExtract has a Hidden Functionality vulnerability, allowing privileged remote attackers to exploit a hidden functionality to execute arbitrary code on the server.

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.0058 Published 2025-10-13 No fix listed CWE-912
TI-2025-02626 CVE-2025-3011 · GHSA-85x6-hj8x-gfch

PiExtract SOOP-CLM - SQL Injection

Priority MEDIUM 49

SOOP-CLM from PiExtract has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete database contents.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00531 Published 2025-03-31 No fix listed CWE-89