Skip to content
OpenAdvisories

Vendor

Asseco

5 known vulnerabilities.

Asseco at a glance

Last 12 months
5
Critical · all time
0
Exploited · all time
0
Public exploit · all time
0
New vulnerabilities per month · last 12 months
0 3 5 December 2025: 0 vulnerabilities Dec 2025 January 2026: 3 vulnerabilities February 2026: 0 vulnerabilities March 2026: 0 vulnerabilities Mar April 2026: 0 vulnerabilities May 2026: 0 vulnerabilities June 2026: 0 vulnerabilities Jun July 2026: 2 vulnerabilities August 2026: 0 vulnerabilities September 2026: 0 vulnerabilities Sep October 2026: 0 vulnerabilities November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202600
Sep 202600
Aug 202600
Jul 202620
Jun 202600
May 202600
Apr 202600
Mar 202600
Feb 202600
Jan 202630
Dec 202500
Nov 202500
Oct 202500
Sep 202500
Aug 202500
Jul 202500
Jun 202500
May 202500
Apr 202500
Mar 202500
Feb 202500
Jan 202500
Dec 202400

Products

proCertum SmartSign 2 InfoMedica Plus 2 AMDX 1
All Critical High Medium Low Exploited only Public exploit

5 results · Feed

  • Medium 4.8
    CVE-2026-57917

    Improper Restriction of XML External Entity Reference in proCertum SmartSign

    proCertum SmartSign parses external XML entities from arbitrary crafted signature files, enabling SSRF and potentially allowing the reading of local files, depending on the parser's configuration. The XML External Entity (XXE) vulnerability is triggered simpl…

    Asseco proCertum SmartSign
  • Medium 4.6
    CVE-2026-57916

    Arbitrary Path Execution via CPS URI in proCertum SmartSign

    proCertum SmartSign opens Certificate Practice Statement (CPS) URI without schema validation. An attacker can prepare arbitrary certificate with CPS URI pointing to a local executable file or any URL, sign a document with it, and send it to the victim. When t…

    Asseco proCertum SmartSign
  • Medium 5.3
    CVE-2025-4596

    Information disclosure via IDOR in Asseco AMDX

    Asseco ADMX system is used for processing medical records. It allows logged in users to access medical files belonging to other users through manipulation of GET arguments containing document IDs. This issue has been fixed in 6.09.01.62 version of ADMX.

    Asseco AMDX
  • Medium 5.9
    CVE-2025-8307

    Recoverable passwords in Asseco Infomedica Plus

    Asseco InfoMedica is a comprehensive solution used to manage both administrative and medical tasks in the healthcare sector. Passwords of all users are stored in a database in an encoded format. An attacker in possession of these encoded passwords is able to …

    Asseco InfoMedica Plus
  • Medium 5.1
    CVE-2025-8306

    Improper Access Control in Asseco Infomedica Plus

    Asseco InfoMedica is a comprehensive solution used to manage both administrative and medical tasks in the healthcare sector. A low privileged user is able to obtain encoded passwords of all other accounts (including main administrator) due to lack of granular…

    Asseco InfoMedica Plus