Skip to content
OpenAdvisories

Vendor

Galaxy Software Services

11 known vulnerabilities.

Products

Vitals ESP 9 iota C.ai Conversational Platform 2
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 7.5
    CVE-2026-4640

    Galaxy Software Services｜Vitals ESP - Missing Authentication

    Vitals ESP developed by Galaxy Software Services has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to execute certain functions to obtain sensitive information.

    Galaxy Software Services Vitals ESP
  • High 8.8
    CVE-2026-4639

    Galaxy Software Services｜Vitals ESP - Incorrect Authorization

    Vitals ESP developed by Galaxy Software Services has a Incorrect Authorization vulnerability, allowing authenticated remote attackers to perform certain administrative functions, thereby escalating privileges.

    Galaxy Software Services Vitals ESP
  • High 8.8
    CVE-2023-41357

    Galaxy Software Services Vitals ESP - Arbitrary File Upload

    Galaxy Software Services Corporation Vitals ESP is an online knowledge base management portal, it has insufficient filtering and validation during file upload. An authenticated remote attacker with general user privilege can exploit this vulnerability to uplo…

    Galaxy Software Services Vitals ESP
  • High 8.6
    CVE-2023-37291

    Galaxy Software Services Vitals ESP - Use of Hard-coded Cryptographic Key

    Galaxy Software Services Vitals ESP is vulnerable to using a hard-coded encryption key. An unauthenticated remote attacker can generate a valid token parameter and exploit this vulnerability to access system to operate processes and access data. This issue af…

    Galaxy Software Services Vitals ESP