Eramba vulnerabilities

Products

• Eramba 11

Newest

• eramba A CORS misconfiguration in Eramba Community and Enterprise Editions v3.26.0 allows an attacker... CVE-2025-55462 Public exploit 6.5 MediumJanuary 13, 2026
• eramba A stored cross-site scripting (XSS) vulnerability in the Filter function of Eramba Version 3.22.3... CVE-2024-27593 5.4 MediumMay 15, 2024
• eramba An issue in Eramba Limited Eramba Enterprise v.3.19.1 allows a remote attacker to execute... CVE-2023-36255 Public exploit EPSS 53.1% 8.8 HighAugust 3, 2023
• eramba A stored cross-site scripting (XSS) vulnerability in the Add function of Eramba GRC Software c2.8... CVE-2022-43342 5.4 MediumNovember 14, 2022
• eramba eramba through c2.8.1 allows HTTP Host header injection with (for example) resultant wkhtml2pdf... CVE-2020-28031 4.3 MediumOctober 30, 2020
• eramba eramba c2.8.1 and Enterprise before e2.19.3 allows XSS via a crafted filename for a file attached... CVE-2020-25104 5.4 MediumSeptember 3, 2020
• eramba eramba c2.8.1 and Enterprise before e2.19.3 has a weak password recovery token (createHash has... CVE-2020-25105 9.8 CriticalSeptember 3, 2020
• eramba Eramba e1.0.6.033 has Reflected XSS on the Error page of the CSV file inclusion tab of the ... CVE-2018-7997 6.1 MediumMarch 9, 2018
• eramba Eramba e1.0.6.033 has Stored XSS on the tooltip box via the /programScopes description parameter. CVE-2018-7996 6.1 MediumMarch 9, 2018
• eramba Eramba e1.0.6.033 has Reflected XSS in reviews/filterIndex/ThirdPartyRiskReview via the... CVE-2018-7894 6.1 MediumMarch 9, 2018
• eramba Eramba e1.0.6.033 has Reflected XSS in the Date Filter via the created parameter to the /crons URI. CVE-2018-7741 6.1 MediumMarch 7, 2018