4cstrategies Exonaut — known CVE vulnerabilities

Every CVE whose affected-product data names 4cstrategies Exonaut, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (7)

• CVE-2025-46658 — CVSS 9.8 (critical): An issue was discovered in ExonautWeb in 4C Strategies Exonaut 21.6. There are verbose error messages.
• CVE-2025-46659 — CVSS 7.5 (high): An issue was discovered in ExonautWeb in 4C Strategies Exonaut 21.6. Information disclosure can occur via an external HTTPS request.
• CVE-2024-55399 — CVSS 6.5 (medium): 4C Strategies Exonaut before v21.6.2.1-1 was discovered to contain a Server-Side Request Forgery (SSRF).
• CVE-2024-55401 — CVSS 6.5 (medium): An issue in 4C Strategies Exonaut before v22.4 allows attackers to execute a directory traversal.
• CVE-2024-55398 — CVSS 6.5 (medium): 4C Strategies Exonaut before v22.4 was discovered to contain insecure permissions.
• CVE-2024-55402 — CVSS 5.3 (medium): 4C Strategies Exonaut before v22.4 was discovered to contain an access control issue.
• CVE-2025-46660 — CVSS 5.3 (medium): An issue was discovered in 4C Strategies Exonaut 21.6. Passwords, stored in the database, are hashed without a salt.