Skip to content
Softwareag vulnerabilities
Newest
-
softwareag aris
In Aris v10.0.23.0.3587512 and before, the file upload functionality does not enforce any rate...
CVE-2025-66838
Public exploit
6.5 Medium
-
softwareag aris
A file upload vulnerability in ARIS 10.0.23.0.3587512 allows attackers to execute arbitrary code...
CVE-2025-66837
Public exploit
6.8 Medium
-
software ag webmethods
Software AG WebMethods access control
CVE-2023-6578
7.3 High
-
azul zulu, software ag webmethods onedata, softwareag webmethods +2 more
Software AG webMethods OneData Deserialization Vulnerability
CVE-2023-0925
9.8 Critical
-
softwareag quartz
quartz-jobs 2.3.2 and below was discovered to contain a code injection vulnerability in the...
CVE-2023-39017
Disputed
9.8 Critical
-
softwareag connx
In Connx Version 6.2.0.1269 (20210623), a cookie can be issued by the application and not have...
CVE-2021-40650
6.5 Medium
-
softwareag connx
In Connx Version 6.2.0.1269 (20210623), a cookie can be issued by the application and not have...
CVE-2021-40649
6.5 Medium
-
softwareag mashzone nextgen
The HTTP client in MashZone NextGen through 10.7 GA deserializes untrusted data when it gets an...
CVE-2021-33207
9.8 Critical
-
softwareag mashzone nextgen
MashZone NextGen through 10.7 GA allows a remote authenticated user, with access to the admin...
CVE-2021-33523
7.2 High
-
softwareag mashzone nextgen
The "Register an Ehcache Configuration File" admin feature in MashZone NextGen through 10.7 GA...
CVE-2021-33208
7.2 High
-
softwareag mashzone nextgen
MashZone NextGen through 10.7 GA has an SSRF vulnerability that allows an attacker to interact...
CVE-2021-33581
7.2 High
-
softwareag terracotta server oss
The Software AG Terracotta Server OSS Docker image 5.4.1 contains a blank password for the root...
CVE-2020-35469
9.8 Critical
-
softwareag quartz, apache tomee, atlassian jira service management +28 more +30 more
XML external entity injection in Terracotta Quartz Scheduler
CVE-2019-13990
Public exploitFix available
EPSS 16.6%
9.8 Critical