Apryse

3 CVEs vendor

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2025-56590 Jan 22, 18:16 CRITICAL POC Act Now

Apryse HTML2PDF SDK through version 11.10 has a command injection vulnerability in the InsertFromURL function allowing remote code execution when converting HTML to PDF.

Command Injection Html2pdf Apryse

NVD

CVSS 3.1

9.8

EPSS

0.0%

CVE-2025-56589 Jan 22, 17:15 HIGH POC This Week

A Local File Inclusion (LFI) and a Server-Side Request Forgery (SSRF) vulnerability was found in the InsertFromHtmlString() function of the Apryse HTML2PDF SDK thru 11.6.0. [CVSS 7.5 HIGH]

Information Disclosure SSRF Html2pdf Apryse

NVD

CVSS 3.1

7.5

EPSS

0.1%

CVE-2024-57240 Mar 03, 17:15 MEDIUM POC This Month

A Cross-Site Scripting (XSS) vulnerability in the Rendering Engine component in Apryse WebViewer v11.1 and earlier allows attackers to execute arbitrary code via a crafted PDF file. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

XSS RCE Webviewer Apryse

NVD GitHub

CVSS 3.1

5.4

EPSS

0.1%

CVE-2025-56590

EPSS 0% CVSS 9.8

CRITICAL POC Act Now

Apryse HTML2PDF SDK through version 11.10 has a command injection vulnerability in the InsertFromURL function allowing remote code execution when converting HTML to PDF.

Command Injection Html2pdf Apryse

NVD

CVE-2025-56589

EPSS 0% CVSS 7.5

HIGH POC This Week

A Local File Inclusion (LFI) and a Server-Side Request Forgery (SSRF) vulnerability was found in the InsertFromHtmlString() function of the Apryse HTML2PDF SDK thru 11.6.0. [CVSS 7.5 HIGH]

Information Disclosure SSRF Html2pdf +1

NVD

CVE-2024-57240

EPSS 0% CVSS 5.4

MEDIUM POC This Month

XSS RCE Webviewer +1

NVD GitHub