Filtered by vendor Vermeg Subscriptions
Total 4 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2024-37828 1 Vermeg 1 Agile Reporter 2025-07-13 4.8 Medium
A stored cross-site scripting (XSS) in Vermeg Agile Reporter v23.2.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Message field under the Set Broadcast Message module.
CVE-2022-34834 1 Vermeg 1 Agile Reporter 2024-11-21 4.8 Medium
An issue was discovered in VERMEG AgileReporter 21.3. Attackers can gain privileges via an XSS payload in an Add Comment action to the Activity log.
CVE-2022-34833 1 Vermeg 1 Agile Reporter 2024-11-21 5.4 Medium
An issue was discovered in VERMEG AgileReporter 21.3. An admin can enter an XSS payload in the Analysis component.
CVE-2022-34832 1 Vermeg 1 Agile Reporter 2024-11-21 6.5 Medium
An issue was discovered in VERMEG AgileReporter 21.3. XXE can occur via an XML document to the Analysis component.