Skip to content
OpenAdvisories

Vendor

Sherpa

4 known vulnerabilities.

Products

Orchestrator 4
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 4.4
    CVE-2025-46545

    In Sherpa Orchestrator 141851, the functionality for adding or updating licenses allows for stored XSS attacks by an ad…

    Sherpa Orchestrator
  • Medium 6.4
    CVE-2025-46544

    In Sherpa Orchestrator 141851, a low-privileged user can elevate their privileges by creating new users and roles.

    Sherpa Orchestrator
  • Medium 5.4
    CVE-2025-46547

    In Sherpa Orchestrator 141851, the web application lacks protection against CSRF attacks, with resultant effects of an …

    Sherpa Orchestrator