Skip to main content

Gss

7 CVEs vendor

Monthly

CVE-2025-14255 Dec 08, 08:15 MEDIUM This Month

Vitals ESP developed by Galaxy Software Services has a SQL Injection vulnerability, allowing authenticated remote attackers to inject arbitrary SQL commands to read database contents.

SQLi Vitalsesp Gss
NVD
CVSS 3.1
6.5
EPSS
0.1%
CVE-2025-14254 Dec 08, 08:15 MEDIUM This Month

Vitals ESP developed by Galaxy Software Services has a SQL Injection vulnerability, allowing authenticated remote attackers to inject arbitrary SQL commands to read database contents.

SQLi Vitalsesp Gss
NVD
CVSS 3.1
6.5
EPSS
0.1%
CVE-2025-14253 Dec 08, 08:15 MEDIUM This Month

Vitals ESP developed by Galaxy Software Services has an Arbitrary File Read vulnerability, allowing privileged remote attackers to exploit Absolute Path Traversal to download arbitrary system files.

Path Traversal Vitalsesp Gss
NVD
CVSS 3.1
4.9
EPSS
0.1%
CVE-2024-52959 Nov 27, 06:15 CRITICAL Act Now

A Improper Control of Generation of Code ('Code Injection') vulnerability in plugin management in iota C.ai Conversational Platform from 1.0.0 through 2.1.3 allows remote authenticated users to. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Code Injection Iota C Ai Gss
NVD
CVSS 4.0
9.3
EPSS
0.6%
CVE-2024-52958 Nov 27, 06:15 CRITICAL Act Now

A improper verification of cryptographic signature vulnerability in plugin management in iota C.ai Conversational Platform from 1.0.0 through 2.1.3 allows remote authenticated users to load a. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Information Disclosure Jwt Attack Iota C Ai Gss
NVD
CVSS 4.0
9.3
EPSS
0.3%
CVE-2023-41357 Nov 03, 07:15 HIGH This Week

Galaxy Software Services Corporation Vitals ESP is an online knowledge base management portal, it has insufficient filtering and validation during file upload. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

File Upload Vitals Enterprise Social Platform Gss
NVD
CVSS 3.1
8.8
EPSS
0.6%
CVE-2023-37291 Jul 21, 04:15 CRITICAL Act Now

Galaxy Software Services Vitals ESP is vulnerable to using a hard-coded encryption key. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Vitals Enterprise Social Platform Gss
NVD
CVSS 3.1
9.8
EPSS
0.3%
EPSS 0% CVSS 6.5
MEDIUM This Month

Vitals ESP developed by Galaxy Software Services has a SQL Injection vulnerability, allowing authenticated remote attackers to inject arbitrary SQL commands to read database contents.

SQLi Vitalsesp Gss
NVD
EPSS 0% CVSS 6.5
MEDIUM This Month

Vitals ESP developed by Galaxy Software Services has a SQL Injection vulnerability, allowing authenticated remote attackers to inject arbitrary SQL commands to read database contents.

SQLi Vitalsesp Gss
NVD
EPSS 0% CVSS 4.9
MEDIUM This Month

Vitals ESP developed by Galaxy Software Services has an Arbitrary File Read vulnerability, allowing privileged remote attackers to exploit Absolute Path Traversal to download arbitrary system files.

Path Traversal Vitalsesp Gss
NVD
EPSS 1% CVSS 9.3
CRITICAL Act Now

A Improper Control of Generation of Code ('Code Injection') vulnerability in plugin management in iota C.ai Conversational Platform from 1.0.0 through 2.1.3 allows remote authenticated users to. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Code Injection Iota C Ai +1
NVD
EPSS 0% CVSS 9.3
CRITICAL Act Now

A improper verification of cryptographic signature vulnerability in plugin management in iota C.ai Conversational Platform from 1.0.0 through 2.1.3 allows remote authenticated users to load a. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Information Disclosure Jwt Attack Iota C Ai +1
NVD
EPSS 1% CVSS 8.8
HIGH This Week

Galaxy Software Services Corporation Vitals ESP is an online knowledge base management portal, it has insufficient filtering and validation during file upload. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

File Upload Vitals Enterprise Social Platform Gss
NVD
EPSS 0% CVSS 9.8
CRITICAL Act Now

Galaxy Software Services Vitals ESP is vulnerable to using a hard-coded encryption key. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Vitals Enterprise Social Platform Gss
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy