Zucchetti Ad Hoc Infinity — known CVE vulnerabilities

Every CVE whose affected-product data names Zucchetti Ad Hoc Infinity, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2024-51321 — CVSS 7.6 (high): In Zucchetti Ad Hoc Infinity 2.4, an improper check on the m_cURL parameter allows an attacker to redirect the victim to an…
• CVE-2024-51319 — CVSS 7.3 (high): A local file include vulnerability in the /servlet/Report of Zucchetti Ad Hoc Infinity 2.4 allows an authenticated attacker to achieve…
• CVE-2025-52180 — CVSS 6.1 (medium): Cross-site scripting (XSS) vulnerability in Zucchetti Ad Hoc Infinity 4.2 and earlier allows remote unauthenticated attackers to inject…
• CVE-2024-51320 — CVSS 5.4 (medium): Cross Site Scripting vulnerability in Zucchetti Ad Hoc Infinity 2.4 allows an authenticated attacker to achieve Remote Code Execution via…
• CVE-2024-51322 — CVSS 5.4 (medium): Cross Site Scripting vulnerability in Zucchetti Ad Hoc Infinity 2.4 allows an authenticated attacker to achieve Remote Code Execution via…