Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: Sergestec Clear all filters
TI-2025-27374 CVE-2025-41021 · GHSA-7xc6-7q94-gh44

Stored Cross-Site Scripting (XSS) vulnerability in Sergestec's Exito

Priority LOW 23

Stored Cross-Site Scripting (XSS) in Sergestec's Exito v8.0, consisting of a stored XSS due to a lack of proper validation of user input by sending a POST request using the 'obs' parameter in '/admin/index.php?action=pro…

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00282 Published 2025-10-16 No fix listed CWE-79
TI-2025-27373 CVE-2025-41020 · GHSA-m8pw-9fx4-mvpr

Authorization bypass in Sergestec Exito

Priority LOW 31

Insecure direct object reference (IDOR) vulnerability in Sergestec's Exito v8.0.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00351 Published 2025-10-16 No fix listed CWE-639