4pace - vulnerabilities (CVEs)

7 CVEs in 1 products, 0 in the last 30 days, newest from 2025-06-25.

Products

CVE-2025-25905 - CVSS 7.1 (high), 2025-06-25: Cross-Site Scripting (XSS) vulnerability in CADClick v1.13.0 and before allows remote attackers to inject arbitrary web script or HTML via the "tree" parameter.
CVE-2024-41511 - CVSS 3.9 (low), 2024-10-04: A Path Traversal (Local File Inclusion) vulnerability in "BinaryFileRedirector.ashx" in CADClick v1.11.0 and before allows remote attackers to retrieve…
CVE-2024-41514 - CVSS 5.4 (medium), 2024-10-04: A reflected cross-site scripting (XSS) vulnerability in "PrevPgGroup.aspx" in CADClick v1.11.0 and before allows remote attackers to inject arbitrary web…
CVE-2024-41513 - CVSS 5.4 (medium), 2024-10-04: A reflected cross-site scripting (XSS) vulnerability in "Artikel.aspx" in CADClick v1.11.0 and before allows remote attackers to inject arbitrary web script…
CVE-2024-41516 - CVSS 5.4 (medium), 2024-10-04: A Reflected cross-site scripting (XSS) vulnerability in "ccHandler.aspx" CADClick <= 1.11.0 allows remote attackers to inject arbitrary web script or HTML via…
CVE-2024-41512 - CVSS 8.8 (high), 2024-10-04: A SQL Injection vulnerability in "ccHandler.aspx" in all versions of CADClick v.1.11.0 and before allows remote attackers to execute arbitrary SQL commands…
CVE-2024-41515 - CVSS 5.4 (medium), 2024-10-04: A reflected cross-site scripting (XSS) vulnerability in "ccHandlerResource.ashx" in CADClick <= 1.11.0 allows remote attackers to inject arbitrary web script…