Skip to content
OpenAdvisories

Vendor

VertiGIS

5 known vulnerabilities.

Products

WebOrderSystem (KundenManager) 2 VertiGIS FM 2 WebOrderSystem (AuftragsManager) 1 FM 0
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.3
    CVE-2026-3877

    Reflected Cross-Site Scripting in Dashboard Search

    A reflected cross-site scripting (XSS) vulnerability in the dashboard search functionality of the VertiGIS FM solution allows attackers to craft a malicious URL, that if visited by an authenticated victim, will execute arbitrary JavaScript in the victim's con…

    VertiGIS VertiGIS FM
  • High 7.4
    CVE-2026-0522

    Local File Inclusion in the File Upload/Download Process

    A local file inclusion vulnerability in the upload/download flow of the VertiGIS FM application allows authenticated attackers to read arbitrary files from the server by manipulating a file's path during its upload. When the file is subsequently downloaded, t…

    VertiGIS VertiGIS FM