Skip to content
Sismics vulnerabilities
Newest
-
sismics teedy
Sismics Teedy API Endpoint file access control
CVE-2025-11853
5.3 Medium
-
sismics teedy
When LDAP connection is activated in Teedy versions between 1.9 to 1.12, the username field of...
CVE-2024-54852
9.8 Critical
-
sismics teedy
Teedy <= 1.12 is vulnerable to Cross Site Request Forgery (CSRF), due to the lack of CSRF...
CVE-2024-54851
8.8 High
-
sismics teedy
Teedy through 1.11 allows CSRF for account takeover via POST /api/user/admin.
CVE-2025-22963
Public exploit
7.5 High
-
sismics teedy
Teedy 1.11 is vulnerable to Cross Site Scripting (XSS) via the management console.
CVE-2024-46278
Public exploit
8.4 High
-
sismics teedy
Teedy v1.11 - Stored cross-site scripting (XSS)
CVE-2023-4892
5.7 Medium
-
sismics teedy, docs +1 more
Teedy - Stored Cross-Site Scripting (XSS) in Tag Name
CVE-2022-22115
9.0 Critical
-
sismics teedy, docs +1 more
Teedy - Reflected Cross-Site Scripting (XSS) in the Search Functionality
CVE-2022-22114
9.6 Critical