Skip to content
OpenAdvisories

Vendor

OutSystems

2 known vulnerabilities.

Products

Lifetime 1 Service Center 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.8
    CVE-2026-40126

    DOM-based Cross-Site Scripting in OutSystems Service Center

    OutSystems Service Center is vulnerable to a DOM-based Cross-Site Scripting (XSS) attack that can be exploited by a low-privileged attacker via the upload of a file with a malicious filename containing JavaScript code. The vulnerability exists in all location…

    OutSystems Service Center
  • Medium 5.3
    CVE-2026-40127

    Authorization Bypass Through User-Controlled Key in OutSystems Lifetime

    OutSystems Lifetime is vulnerable to Authorization Bypass Through User-Controlled Key vulnerability in ApplicationID parameter. Any authenticated user, can read the Change Log containing actions performed by other users as well as application name of any appl…

    OutSystems Lifetime