Skip to content
OpenAdvisories

Vendor

Agiloft

4 known vulnerabilities.

Products

Agiloft 4
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.1
    CVE-2025-35112

    Agiloft XML external entity local path traversal

    Agiloft Release 28 contains an XML External Entities vulnerability in any table that allows 'import/export', allowing an authenticated attacker to import the template file and perform path traversal on the local system files. Users should upgrade to Agiloft R…

    Agiloft Agiloft
  • Medium 5.9
    CVE-2025-35113

    Agiloft improper neutralization in EUI template engine

    Agiloft Release 28 does not properly neutralize special elements used in an EUI template engine, allowing an authenticated attacker to achieve remote code execution by loading a specially crafted payload. Users should upgrade to Agiloft Release 31.

    Agiloft Agiloft