Skymarx Solutions Xflow — known CVE vulnerabilities

Every CVE whose affected-product data names Skymarx Solutions Xflow, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2006-1849 — CVSS 7.5 (high): Multiple SQL injection vulnerabilities in members_only/index.cgi in xFlow 5.46.11 and earlier allow remote attackers to execute arbitrary…
• CVE-2006-1851 — CVSS 5.0 (medium): xFlow 5.46.11 and earlier allows remote attackers to determine the installation path of the application via the (1) action parameter to…
• CVE-2006-1850 — CVSS 2.6 (low): Multiple cross-site scripting (XSS) vulnerabilities in xFlow 5.46.11 and earlier allow remote attackers to inject arbitrary web script or…