CVE-2025-43955
TwsCachedXPathAPI in Convertigo through 8.3.4 does not restrict the use of commons-jxpath APIs.
Scoring
- Severity
- LOW
- CVSS base score
- 2.2
- CVSS vector
- CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:N
- EPSS probability
- 0.35%
- CWE
- CWE-749
- Published
- 2025-04-20
- Last modified
- 2026-08-26
Affected products
- Convertigo Convertigo
Weakness type
Related vulnerabilities
- CVE-2018-10931 — It was found that cobbler 2.6.x exposed all functions from its CobblerXMLRPCInterface class over XMLRPC. A remote, unaut
- CVE-2023-27363 — Foxit PDF Reader exportXFAData Exposed Dangerous Method Remote Code Execution Vulnerability
- CVE-2023-38124 — Inductive Automation Ignition OPC UA Quick Client Task Scheduling Exposed Dangerous Function Remote Code Execution Vulnerability
- CVE-2023-51581 — Voltronic Power ViewPower MacMonitorConsole Exposed Dangerous Method Remote Code Execution Vulnerability
- CVE-2023-51575 — Voltronic Power ViewPower MonitorConsole Exposed Dangerous Method Remote Code Execution Vulnerability
- CVE-2021-34996 — This vulnerability allows remote attackers to execute arbitrary code on affected installations of Commvault CommCell 11.
- CVE-2023-51582 — Voltronic Power ViewPower LinuxMonitorConsole Exposed Dangerous Method Remote Code Execution Vulnerability
- CVE-2023-44414 — D-Link D-View coreservice_action_script Exposed Dangerous Function Remote Code Execution Vulnerability