Every CVE whose affected-product data names Csprousers Csweb, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.
CVEs (4)
CVE-2025-60949 — CVSS 9.1 (critical): Census CSWeb 8.0.1 allows "app/config" to be reachable via HTTP in some deployments. A remote, unauthenticated attacker could send requests…
CVE-2025-60946 — CVSS 8.8 (high): Census CSWeb 8.0.1 allows arbitrary file path input. A remote, authenticated attacker could access unintended file directories. Fixed in…
CVE-2025-60947 — CVSS 8.8 (high): Census CSWeb 8.0.1 allows arbitrary file upload. A remote, authenticated attacker could upload a malicious file, possibly leading to remote…
CVE-2025-60948 — CVSS 4.6 (medium): Census CSWeb 8.0.1 allows stored cross-site scripting in user supplied fields. A remote, authenticated attacker could store malicious…