Apryse records
4 published records for vendor apryse.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 1
- With a fix record
- 25%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')1
- CWE-918 Server-Side Request Forgery (SSRF)1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
4 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
39Monitor | CVE-2025-56590No exploit | An issue was discovered in the InsertFromURL() function of the Apryse HTML2PDF SDK thru 11.10.apryse · html2pdf · CWE-78 | Critical9.8 | — | 0.5% | Jan 22, 2026 |
30Monitor | CVE-2025-56589No exploit | A Local File Inclusion (LFI) and a Server-Side Request Forgery (SSRF) vulnerability was found in the InsertFromHtmlString() function of the apryse · html2pdf · CWE-918 | High7.5 | — | 0.4% | Jan 22, 2026 |
21Monitor | CVE-2024-57240No exploit | A Cross-Site Scripting (XSS) vulnerability in the Rendering Engine component in Apryse WebViewer v11.1 and earlier allows attackers to execuapryse · webviewer · CWE-79 | Medium5.4 | — | 0.2% | Mar 3, 2025 |
14Monitor | CVE-2024-4327No exploit | Apryse WebViewer PDF Document cross site scriptingapryse · webviewer · CWE-79 | Low3.5 | — | 0.4% | Apr 29, 2024 |
- CVE-2025-5659039Monitor
An issue was discovered in the InsertFromURL() function of the Apryse HTML2PDF SDK thru 11.10.
CriticalCVSS 9.8No exploitEPSS 0%apryse · html2pdfJan 22, 2026
- CVE-2025-5658930Monitor
A Local File Inclusion (LFI) and a Server-Side Request Forgery (SSRF) vulnerability was found in the InsertFromHtmlString() function of the
HighCVSS 7.5No exploitEPSS 0%apryse · html2pdfJan 22, 2026
- CVE-2024-5724021Monitor
A Cross-Site Scripting (XSS) vulnerability in the Rendering Engine component in Apryse WebViewer v11.1 and earlier allows attackers to execu
MediumCVSS 5.4No exploitEPSS 0%apryse · webviewerMar 3, 2025
- CVE-2024-432714Monitor
Apryse WebViewer PDF Document cross site scripting
LowCVSS 3.5No exploitEPSS 0%apryse · webviewerApr 29, 2024