Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

11 records

Vendor: Ragic Clear all filters
TI-2026-59897 CVE-2026-87747 · GHSA-35r6-7qjq-22gr

Ragic｜Enterprise Cloud Database - Arbitrary File Read

Priority LOW 31

The Enterprise Cloud Database developed by Ragic has an Arbitrary File Read vulnerability.

CVSS 4.0MEDIUM 6.9 Network High privileges No interaction EPSS 0.00611 Published 2026-09-09 No fix listed CWE-23
TI-2026-13091 CVE-2026-15553 · GHSA-q692-3gm2-wf73

Ragic｜Enterprise Cloud Database - Arbitrary File Upload

Priority LOW 37

Enterprise Cloud Database developed by Ragic has a Arbitrary File Upload vulnerability, allowing unauthenticated remote attackers to upload malicious files and make them available for users to download.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.0041 Published 2026-07-13 No fix listed CWE-434
TI-2026-13090 CVE-2026-15552 · GHSA-gv5r-m2vf-6q47

Ragic｜Enterprise Cloud Database - Stored Cross-Site Scripting

Priority LOW 24

Enterprise Cloud Database developed by Ragic has a Stored Cross-Site Scripting vulnerability, allowing unauthenticated remote attackers to inject persistent JavaScript code executed in users' browsers upon page load.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00341 Published 2026-07-13 No fix listed CWE-79
TI-2025-13699 CVE-2025-15016 · GHSA-x9qh-8h86-936g

Ragic｜Enterprise Cloud Database - Hard-coded Cryptographic Key

Priority MEDIUM 49

Enterprise Cloud Database developed by Ragic has a Hard-coded Cryptographic Key vulnerability, allowing unauthenticated remote attackers to exploit the fixed key to generate verification information and log into the syst…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00529 Published 2025-12-22 No fix listed CWE-321
TI-2025-13698 CVE-2025-15015 · GHSA-qhjv-vvf7-w9xf

Ragic｜Enterprise Cloud Database - Arbitrary File Read

Priority MEDIUM 45

Enterprise Cloud Database developed by Ragic has a Arbitrary File Read vulnerability, allowing unauthenticated remote attackers to exploit Relative Path Traversal to download arbitrary system files.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00609 Published 2025-12-22 No fix listed CWE-23
TI-2025-10705 CVE-2025-11675 · GHSA-5w7g-vcp5-pf38

Ragic｜Enterprise Cloud Database - Arbitrary File Upload

Priority MEDIUM 40

Enterprise Cloud Database developed by Ragic has an Arbitrary File Upload vulnerability, allowing privileged remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the se…

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.0058 Published 2025-10-13 No fix listed CWE-434
TI-2024-09268 CVE-2024-9985 · GHSA-9jqp-827w-wpmw

Ragic Enterprise Cloud Database - Arbitrary File Upload

Priority MEDIUM 44

Enterprise Cloud Database from Ragic does not properly validate the file type for uploads.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00649 Published 2024-10-15 Fixed in 2024/08/08 09:45:25 CWE-434
TI-2024-09267 CVE-2024-9984 · GHSA-qw66-2q7h-vq76

Ragic Enterprise Cloud Database - Missing Authentication

Priority MEDIUM 50

Enterprise Cloud Database from Ragic does not authenticate access to specific functionality, allowing unauthenticated remote attackers to use this functionality to obtain any user's session cookie.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00571 Published 2024-10-15 Fixed in 2024/08/08 09:45:25 CWE-306
TI-2024-09266 CVE-2024-9983 · GHSA-7f7q-jm58-6f8f

Ragic Enterprise Cloud Database - Arbitrary File Read through Path Traversal

Priority MEDIUM 40

Enterprise Cloud Database from Ragic does not properly validate a specific page parameter, allowing unauthenticated remote attackers to exploit this vulnerability to read arbitrary system files.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00666 Published 2024-10-15 Fixed in 2024/08/08 09:45:25 CWE-23
TI-2023-21940 CVE-2023-41343 · GHSA-jr92-46c3-hhcf

Ragic No-Code Database Builder - Stored XSS

Priority LOW 25

Rogic No-Code Database Builder's file uploading function has insufficient filtering for special characters.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00429 Published 2023-11-03 No fix listed CWE-79
TI-2022-19367 CVE-2022-40739 · GHSA-cxpj-77xf-24w9

Ragic, Inc. Ragic - Reflected XSS

Priority LOW 27

Ragic report generation page has insufficient filtering for special characters.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00526 Published 2022-10-31 No fix listed CWE-79