Skip to content
OpenAdvisories

Vendor

Agiloft

4 known vulnerabilities.

Products

Agiloft 4
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.1
    CVE-2025-35115

    Agiloft insecure download of system packages

    Agiloft Release 28 downloads critical system packages over an insecure HTTP connection. An attacker in a Man-In-the-Middle position could replace or modify the contents of the download URL. Users should upgrade to Agiloft Release 30.

    Agiloft Agiloft
  • High 7.5
    CVE-2025-35114

    Agiloft local privilege escalation via default credentials

    Agiloft Release 28 contains several accounts with default credentials that could allow local privilege escalation. The password hash is known for at least one of the accounts and the credentials could be cracked offline. Users should upgrade to Agiloft Releas…

    Agiloft Agiloft