Skip to content
OpenAdvisories

Vendor

ARKETEAM

5 known vulnerabilities.

Products

PROTECTELMAJ 5 BDF 5
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.1
    CVE-2025-68395

    Stored XSS in Protectel

    ARKETEAM Protectel modules PROTECTELMAJ and BDF contain a note editor module vulnerable to Stored XSS. A low privileged attacker can inject arbitrary HTML and JS into notes, which will be rendered/executed when a user visits this module. This issue has been f…

    ARKETEAM PROTECTELMAJ BDF
  • Medium 5.1
    CVE-2025-68392

    Incorrect authorization in Protectel

    ARKETEAM Protectel modules PROTECTELMAJ and BDF allow low privileged users to use some of the functionalities reserved for admin users by forging direct requests to a specific endpoint.  This issue has been fixed in: PROTECTELMAJ v6.5.19 and BDF v6.4.67

    ARKETEAM PROTECTELMAJ BDF
  • Medium 5.3
    CVE-2025-68391

    Arbitrary File Upload in Protectel

    ARKETEAM Protectel modules PROTECTELMAJ and BDF are vulnerable to arbitrary file upload. Any user is able to upload arbitrary file and override existing files in a temporary folder. This vulnerability might lead to execution of embedded JavaScript scripts whe…

    ARKETEAM BDF PROTECTELMAJ