Sismics records

8 published records for vendor sismics.

Researcher profile

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

8 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
39Monitor	CVE-2024-54852No exploit	When LDAP connection is activated in Teedy versions between 1.9 to 1.12, the username field of the login form is vulnerable to LDAP injectiosismics · teedy · CWE-90 Pre-auth	Critical9.8	—	0.7%	Jan 29, 2025
38Monitor	CVE-2022-22114No exploit	Teedy - Reflected Cross-Site Scripting (XSS) in the Search Functionalitysismics · teedy · CWE-79 Pre-auth XSS	Critical9.6	—	1.3%	Jan 10, 2022
36Monitor	CVE-2022-22115No exploit	Teedy - Stored Cross-Site Scripting (XSS) in Tag Namesismics · teedy · CWE-79 XSS	Critical9.0	—	1.0%	Jan 10, 2022
35Monitor	CVE-2024-54851No exploit	Teedy <= 1.12 is vulnerable to Cross Site Request Forgery (CSRF), due to the lack of CSRF protection.sismics · teedy · CWE-352 Pre-auth CSRF	High8.8	—	0.2%	Jan 29, 2025
34Monitor	CVE-2024-46278Proof of concept	Teedy 1.11 is vulnerable to Cross Site Scripting (XSS) via the management console.sismics · teedy · CWE-79 XSS	High8.4	—	2.8%	Oct 7, 2024
30Monitor	CVE-2025-22963Proof of concept	Teedy through 1.11 allows CSRF for account takeover via POST /api/user/admin.sismics · teedy · CWE-352 Pre-auth CSRF	High7.5	—	0.2%	Jan 13, 2025
18Monitor	CVE-2023-4892No exploit	Teedy v1.11 - Stored cross-site scripting (XSS)sismics · teedy · CWE-79 XSS	Medium4.6	—	0.4%	Sep 25, 2023
8Monitor	CVE-2025-11853No exploit	Sismics Teedy API Endpoint file access controlsismics · teedy · CWE-266	Low2.1	—	0.4%	Oct 16, 2025

CVE-2024-54852
39Monitor
When LDAP connection is activated in Teedy versions between 1.9 to 1.12, the username field of the login form is vulnerable to LDAP injectio
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
sismics · teedyJan 29, 2025
CVE-2022-22114
38Monitor
Teedy - Reflected Cross-Site Scripting (XSS) in the Search Functionality
CriticalCVSS 9.6No exploitEPSS 1%
- Pre-auth
- XSS
sismics · teedyJan 10, 2022
CVE-2022-22115
36Monitor
Teedy - Stored Cross-Site Scripting (XSS) in Tag Name
CriticalCVSS 9.0No exploitEPSS 1%
- XSS
sismics · teedyJan 10, 2022
CVE-2024-54851
35Monitor
Teedy <= 1.12 is vulnerable to Cross Site Request Forgery (CSRF), due to the lack of CSRF protection.
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- CSRF
sismics · teedyJan 29, 2025
CVE-2024-46278
34Monitor
Teedy 1.11 is vulnerable to Cross Site Scripting (XSS) via the management console.
HighCVSS 8.4Proof of conceptEPSS 2%
- XSS
sismics · teedyOct 7, 2024
CVE-2025-22963
30Monitor
Teedy through 1.11 allows CSRF for account takeover via POST /api/user/admin.
HighCVSS 7.5Proof of conceptEPSS 0%
- Pre-auth
- CSRF
sismics · teedyJan 13, 2025
CVE-2023-4892
18Monitor
Teedy v1.11 - Stored cross-site scripting (XSS)
MediumCVSS 4.6No exploitEPSS 0%
- XSS
sismics · teedySep 25, 2023
CVE-2025-11853
8Monitor
Sismics Teedy API Endpoint file access control
LowCVSS 2.1No exploitEPSS 0%
sismics · teedyOct 16, 2025