Agiloft (Atlassian) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2025-08-26. Vendor: Atlassian.

CVEs of Agiloft

• CVE-2025-35114 - CVSS 8.7 (high), 2025-08-26: Agiloft Release 28 contains several accounts with default credentials that could allow local privilege escalation. The password hash is known for at least one…
• CVE-2025-35113 - CVSS 7.2 (high), 2025-08-26: Agiloft Release 28 does not properly neutralize special elements used in an EUI template engine, allowing an authenticated attacker to achieve remote code…
• CVE-2025-35112 - CVSS 5.1 (medium), 2025-08-26: Agiloft Release 28 contains an XML External Entities vulnerability in any table that allows 'import/export', allowing an authenticated attacker to import the…
• CVE-2025-35115 - CVSS 9.2 (critical), 2025-08-26: Agiloft Release 28 downloads critical system packages over an insecure HTTP connection. An attacker in a Man-In-the-Middle position could replace or modify…