erxes records

4 published records for vendor erxes.

Researcher profile

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

4 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
39Monitor	CVE-2021-32853Proof of concept	Erxes vulnerable to Cross-site Scriptingerxes · erxes · CWE-79 Pre-auth XSS	Critical9.6	—	3.1%	Feb 20, 2023
39Monitor	CVE-2024-57190No exploit	Erxes <1.6.1 is vulnerable to Incorrect Access Control.erxes · erxes · CWE-284 Pre-auth Auth bypass Broken access control (IDOR)	Critical9.8	—	0.6%	Jun 10, 2025
21Monitor	CVE-2024-57186No exploit	In Erxes <1.6.2, an unauthenticated attacker can read arbitrary files from the system using a Path Traversal vulnerability in the /read-fileerxes · erxes · CWE-22 Pre-auth Path traversal	Medium5.4	—	0.4%	Jun 10, 2025
21Monitor	CVE-2024-57189No exploit	In Erxes <1.6.2, an authenticated attacker can write to arbitrary files on the system using a Path Traversal vulnerability in the importHisterxes · erxes · CWE-22 Pre-auth Path traversal	Medium5.4	—	0.4%	Jun 10, 2025

CVE-2021-32853
39Monitor
Erxes vulnerable to Cross-site Scripting
CriticalCVSS 9.6Proof of conceptEPSS 3%
- Pre-auth
- XSS
erxes · erxesFeb 20, 2023
CVE-2024-57190
39Monitor
Erxes <1.6.1 is vulnerable to Incorrect Access Control.
CriticalCVSS 9.8No exploitEPSS 1%
erxes · erxesJun 10, 2025
CVE-2024-57186
21Monitor
In Erxes <1.6.2, an unauthenticated attacker can read arbitrary files from the system using a Path Traversal vulnerability in the /read-file
MediumCVSS 5.4No exploitEPSS 0%
- Pre-auth
- Path traversal
erxes · erxesJun 10, 2025
CVE-2024-57189
21Monitor
In Erxes <1.6.2, an authenticated attacker can write to arbitrary files on the system using a Path Traversal vulnerability in the importHist
MediumCVSS 5.4No exploitEPSS 0%
- Pre-auth
- Path traversal
erxes · erxesJun 10, 2025