Diskover (Diskoverdata) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 25 known versions, newest CVE from 2025-08-27. Vendor: Diskoverdata.

CVEs of Diskover

• CVE-2025-50984 - CVSS 5.3 (medium), 2025-08-27: diskover-web v2.3.0 Community Edition is vulnerable to multiple boolean-based blind SQL injection flaws in its Elasticsearch configuration form. Unsanitized…
• CVE-2025-50986 - CVSS 5.6 (medium), 2025-08-27: diskover-web v2.3.0 Community Edition suffers from multiple stored cross-site scripting (XSS) vulnerabilities in its administrative settings interface.…
• CVE-2025-50985 - CVSS 5.6 (medium), 2025-08-27: diskover-web v2.3.0 Community Edition is vulnerable to multiple reflected cross-site scripting (XSS) flaws in its web interface. Unsanitized GET parameters…