Vulnerabilities (CVE)

Filtered by vendor 4cstrategies Subscribe
Filtered by product Exonaut
Total 7 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2024-55399 1 4cstrategies 1 Exonaut 2025-10-09 N/A 6.5 MEDIUM
4C Strategies Exonaut before v21.6.2.1-1 was discovered to contain a Server-Side Request Forgery (SSRF).
CVE-2025-46658 1 4cstrategies 1 Exonaut 2025-10-02 N/A 9.8 CRITICAL
An issue was discovered in ExonautWeb in 4C Strategies Exonaut 21.6. There are verbose error messages.
CVE-2025-46659 1 4cstrategies 1 Exonaut 2025-10-02 N/A 7.5 HIGH
An issue was discovered in ExonautWeb in 4C Strategies Exonaut 21.6. Information disclosure can occur via an external HTTPS request.
CVE-2024-55398 1 4cstrategies 1 Exonaut 2025-10-01 N/A 6.5 MEDIUM
4C Strategies Exonaut before v22.4 was discovered to contain insecure permissions.
CVE-2024-55402 1 4cstrategies 1 Exonaut 2025-10-01 N/A 5.3 MEDIUM
4C Strategies Exonaut before v22.4 was discovered to contain an access control issue.
CVE-2025-46660 1 4cstrategies 1 Exonaut 2025-10-01 N/A 5.3 MEDIUM
An issue was discovered in 4C Strategies Exonaut 21.6. Passwords, stored in the database, are hashed without a salt.
CVE-2024-55401 1 4cstrategies 1 Exonaut 2025-10-01 N/A 6.5 MEDIUM
An issue in 4C Strategies Exonaut before v22.4 allows attackers to execute a directory traversal.