Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: T-Systems Clear all filters
TI-2026-62635 CVE-2026-92976 · GHSA-f95c-wf66-hq9m

Stored Cross-Site Scripting (XSS) in T-Systems’ TAO 2.0

Priority LOW 23

A stored Cross-Site Scripting (XSS) vulnerability in the profile management functionality of T-Systems’ TAO 2.0 suite.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00375 Published 2026-09-18 No fix listed CWE-613
TI-2026-06306 CVE-2026-7185 · GHSA-xm42-w58j-mp94

Unauthorized access to files in T-Systems products

Priority LOW 27

A validation vulnerability has been identified in certain web features related to file management or upload in several products of the TAO 2.0 suite.

CVSS 4.0MEDIUM 6.0 Network Low privileges No interaction EPSS 0.00437 Published 2026-07-06 Fixed in 2602.00 CWE-22
TI-2026-01130 CVE-2026-1432 · GHSA-hw4f-5c6g-8xfc

SQL injection (SQLi) on the Buroweb platform

Priority MEDIUM 48

SQL injection vulnerability in the Buroweb platform version 2505.0.12, specifically in the 'tablon' component.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00348 Published 2026-02-03 Fixed in 2505.0.13 CWE-89