Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Vendor: VertiGIS Ltd. Clear all filters
TI-2026-79578 CVE-2026-4951 · GHSA-4jx9-cq4x-76w5

Reflected XSS in VertiGIS WebOrderSystem CustomerAdministration Portal

Priority LOW 23

The CustomerAdministration portal (KundenManager) of VertiGIS WebOrderSystem allows privileged users to search for employees across all defined companies (user groups).

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00362 Published 2026-10-23 No fix listed CWE-79
TI-2026-79577 CVE-2026-4950 · GHSA-g5vv-w6m9-qrh6

Stored cross-site scripting in VertiGIS WebOrderSystem KundenManager

Priority LOW 22

The CustomerAdministration portal (KundenManager) of VertiGIS WebOrderSystem allows privileged users to manage the employees of defined companies (user groups).

CVSS 4.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00309 Published 2026-10-23 No fix listed CWE-79
TI-2026-03356 CVE-2026-3877 · GHSA-mc25-w9g7-hq9v

Reflected Cross-Site Scripting in Dashboard Search

Priority HIGH 67

A reflected cross-site scripting (XSS) vulnerability in the dashboard search functionality of the VertiGIS FM solution allows attackers to craft a malicious URL, that if visited by an authenticated victim, will execute a…

CVSS 4.0HIGH 7.3 Network No auth User interaction EPSS 0.00187 Published 2026-04-01 Fixed in 10.13.403 CWE-79
TI-2026-00330 CVE-2026-0522 · GHSA-v2gh-2f53-p2w4

Local File Inclusion in the File Upload/Download Process

Priority HIGH 68

A local file inclusion vulnerability in the upload/download flow of the VertiGIS FM application allows authenticated attackers to read arbitrary files from the server by manipulating a file's path during its upload.

CVSS 4.0HIGH 7.4 Network Low privileges No interaction EPSS 0.00619 Published 2026-04-01 Fixed in 10.11.363 CWE-610