Skip to content
OpenAdvisories

Vendor

Ilevia Srl.

14 known vulnerabilities.

Products

EVE X1 Server 12 EVE X1/X5 Server 2 EVE X1 0
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.6
    CVE-2025-14276

    Ilevia EVE X1 Server leaf_search.php command injection

    A vulnerability was determined in Ilevia EVE X1 Server up to 4.6.5.0.eden. Impacted is an unknown function of the file /ajax/php/leaf_search.php. This manipulation of the argument line causes command injection. The attack can be initiated remotely. A high deg…

    Ilevia Srl. EVE X1 Server
  • Medium 5.1
    CVE-2025-34512

    Ilevia EVE X1 Server 4.7.18.0.eden Reflected XSS

    Ilevia EVE X1 Server firmware versions ≤ 4.7.18.0.eden contain a reflected cross-site scripting (XSS) vulnerability in index.php that allows an unauthenticated attacker to execute arbitrary script in the victim's browser. Ilevia has declined to service this v…

    Ilevia Srl. EVE X1 Server