Skip to content
OpenAdvisories

Vendor

VertiGIS

5 known vulnerabilities.

Products

WebOrderSystem (KundenManager) 2 VertiGIS FM 2 WebOrderSystem (AuftragsManager) 1 FM 0
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.1
    CVE-2026-4952

    Stored Cross-Site Scripting in OrderAdministration Portal (AuftragsManager) via Business Reference in VertiGIS WebOrderSystem

    The "ASMobile" web interface, which is part of the VertiGIS software package "GIS Portal", allows authenticated users to define a business reference. JavaScript code can be inserted into this field. On its own this only affects the user who entered it (self-X…

    VertiGIS WebOrderSystem (AuftragsManager)
  • Medium 5.1
    CVE-2026-4951

    Reflected Cross-Site Scripting in CustomerAdministration Portal (KundenManager)in VertiGIS WebOrderSystem

    The CustomerAdministration portal (KundenManager) of VertiGIS WebOrderSystem allows privileged users to search for employees across all defined companies (user groups). The search term can be passed in the "searchValue" URL parameter, so the search is perform…

    VertiGIS WebOrderSystem (KundenManager)
  • Medium 4.8
    CVE-2026-4950

    Stored Cross-Site Scripting in CustomerAdministration Portal (KundenManager) in VertiGIS WebOrderSystem

    The CustomerAdministration portal (KundenManager) of VertiGIS WebOrderSystem allows privileged users to manage the employees of defined companies (user groups). User properties, for example the "secondName" parameter, can be filled with JavaScript code while …

    VertiGIS WebOrderSystem (KundenManager)