Skip to content
OpenAdvisories

Vendor

Data Illusion Zumbrunn

2 known vulnerabilities.

Products

NGSurvey 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.1
    CVE-2025-15479

    NGSurvey Enterprise 3.6.4 incorrect authorization exposes other users’ API keys and personal data

    Stored cross-site scripting (XSS, CWE-79) in the survey content and administration functionality in Data Illusion Zumbrunn NGSurvey Enterprise Edition 3.6.4 on all supported platforms ( on Windows and Linux servers ) allows authenticated remote users with sur…

    Data Illusion Zumbrunn NGSurvey