Skip to content
OpenAdvisories

Vendor

CronosWeb i2A

1 known vulnerabilities.

Products

CronosWeb 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.3
    CVE-2025-41358

    Direct reference to insecure objects (IDOR) in CronosWeb from CronosWeb i2A

    Direct Object Reference Vulnerability (IDOR) in i2A's CronosWeb, in versions prior to 25.00.00.12, inclusive. This vulnerability could allow an authenticated attacker to access other users' documents by manipulating the ‘documentCode’ parameter in '/CronosWeb…

    CronosWeb i2A CronosWeb