Evolution (Cs-technologies) - vulnerabilities (CVEs)
11 CVEs, 0 in the last 30 days, 256 known versions, newest CVE from 2026-09-15. Vendor: Cs-technologies.
CVEs of Evolution
- CVE-2026-91997 - CVSS 6.9 (medium), 2026-09-15: evolution-api through 2.3.7 contains an incorrect array comparison in the metricsIPWhitelist middleware that always evaluates to false, allowing…
- CVE-2022-50949 - CVSS 6.4 (medium), 2026-05-10: WordPress Plugin Videos sync PDF 1.7.4 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by…
- CVE-2024-29844 - CVSS 9.8 (critical), 2024-04-15: Default credentials on the Web Interface of Evolution Controller 2.x allows anyone to log in to the server directly to perform administrative functions. Upon…
- CVE-2024-29843 - CVSS 7.5 (high), 2024-04-15: The Web interface of Evolution Controller Versions 2.04.560.31.03.2024 and below contains poorly configured access control on MOBILE_GET_USERS_LIST, allowing…
- CVE-2024-29842 - CVSS 7.5 (high), 2024-04-15: The Web interface of Evolution Controller Versions 2.04.560.31.03.2024 and below contains poorly configured access control on…
- CVE-2024-29838 - CVSS 7.5 (high), 2024-04-15: The Web interface of Evolution Controller Versions 2.04.560.31.03.2024 and below does not proper sanitize user input, allowing for an unauthenticated attacker…
- CVE-2024-29841 - CVSS 7.5 (high), 2024-04-15: The Web interface of Evolution Controller Versions 2.04.560.31.03.2024 and below contains poorly configured access control on…
- CVE-2024-29837 - CVSS 8.8 (high), 2024-04-15: The Web interface of Evolution Controller Versions 2.04.560.31.03.2024 and below uses poor session management, allowing for an unauthenticated attacker to…
- CVE-2024-29840 - CVSS 7.5 (high), 2024-04-15: The Web interface of Evolution Controller Versions 2.04.560.31.03.2024 and below contains poorly configured access control on…
- CVE-2024-29839 - CVSS 7.5 (high), 2024-04-15: The Web interface of Evolution Controller Versions 2.04.560.31.03.2024 and below contains poorly configured access control on DESKTOP_EDIT_USER_GET_CARD,…
- CVE-2024-29836 - CVSS 9.8 (critical), 2024-04-15: The Web interface of Evolution Controller Versions 2.04.560.31.03.2024 and below contains poorly configured access control, allowing for an unauthenticated…
