Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Vendor: SABBATIC Clear all filters
TI-2026-82363 CVE-2026-5702 · GHSA-3pwq-x9rx-xp23

Cross-site request forgery in SABBATIC app

Priority LOW 21

Cross-Site Request Forgery (CSRF) vulnerability in SABBATIC application that allows an attacker can trick an authenticated user into clicking a malicious link or loading a page that sends unauthorized requests to a vulne…

CVSS 4.0MEDIUM 4.8 Network Low privileges User interaction EPSS 0.00177 Published 2026-10-29 No fix listed CWE-352
TI-2026-82362 CVE-2026-5700 · GHSA-6vcp-wwhw-vp55

Stored cross-site scripting in SABBATIC app

Priority LOW 22

Stored Cross-Site Scripting (XSS) vulnerability in SABBATIC application that allows an attacker to store JavaScript code so that when a user views the page, code can be executed in the victim's browser.

CVSS 4.0MEDIUM 4.8 Network Low privileges User interaction EPSS 0.003 Published 2026-10-29 No fix listed CWE-79
TI-2026-82361 CVE-2026-5699 · GHSA-qx7c-rf9h-6rrg

Stored cross-site scripting in SABBATIC app through company name

Priority LOW 22

Stored Cross-Site Scripting (XSS) vulnerability in SABBATIC application that allows an attacker to store JavaScript code so that when a user views the page, code can be executed in the victim's browser.

CVSS 4.0MEDIUM 4.8 Network Low privileges User interaction EPSS 0.003 Published 2026-10-29 No fix listed CWE-79
TI-2026-82360 CVE-2026-5698 · GHSA-5w45-2rcm-53hv

Stored cross-site scripting in SABBATIC app

Priority LOW 22

Stored Cross-Site Scripting (XSS) vulnerability in SABBATIC application that allows an attacker to store JavaScript code so that when a user views the page, code can be executed in the victim's browser.

CVSS 4.0MEDIUM 4.8 Network Low privileges User interaction EPSS 0.003 Published 2026-10-29 No fix listed CWE-79
TI-2026-82359 CVE-2026-5697 · GHSA-6c6m-3wfw-4pj6

Stored cross-site scripting in SABBATIC app via the nombre parameter

Priority LOW 22

Stored Cross-Site Scripting (XSS) vulnerability in SABBATIC application that allows an attacker to store JavaScript code so that when a user views the page, code can be executed in the victim's browser.

CVSS 4.0MEDIUM 4.8 Network Low privileges User interaction EPSS 0.003 Published 2026-10-29 No fix listed CWE-79