Skip to content
OpenAdvisories

Product · Altium

AES

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.6
    CVE-2025-27380

    HTML Injection Leading to Script Execution in Altium Enterprise Server

    HTML injection in Project Release in Altium Enterprise Server (AES) 7.0.3 on all platforms allows an authenticated attacker to execute arbitrary JavaScript in the victim’s browser via crafted HTML content.

    Altium AES
  • High 8.6
    CVE-2025-27378

    SQL Injection in AES Due to Inactive SQL Parsing Configuration

    AES contains a SQL injection vulnerability due to an inactive configuration that prevents the latest SQL parsing logic from being applied. When this configuration is not enabled, crafted input may be improperly handled, allowing attackers to inject and execut…

    Altium AES