Every CVE whose affected-product data names Gss Vitalsesp, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.
CVEs (5)
CVE-2026-4639 — CVSS 8.8 (high): Vitals ESP developed by Galaxy Software Services has a Incorrect Authorization vulnerability, allowing authenticated remote attackers to…
CVE-2026-4640 — CVSS 7.5 (high): Vitals ESP developed by Galaxy Software Services has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to…
CVE-2025-14254 — CVSS 6.5 (medium): Vitals ESP developed by Galaxy Software Services has a SQL Injection vulnerability, allowing authenticated remote attackers to inject…
CVE-2025-14255 — CVSS 6.5 (medium): Vitals ESP developed by Galaxy Software Services has a SQL Injection vulnerability, allowing authenticated remote attackers to inject…
CVE-2025-14253 — CVSS 4.9 (medium): Vitals ESP developed by Galaxy Software Services has an Arbitrary File Read vulnerability, allowing privileged remote attackers to exploit…