Atlassian Agiloft
4 CVEs affecting Atlassian Agiloft. Latest disclosed: 2025-08-26. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-35115 | High | 8.1 | 2025-08-26 | Agiloft Release 28 downloads critical system packages over an insecure HTTP connection. An attacker in a Man-In-the-Middle position could replace or modify the… |
CVE-2025-35114 | High | 7.5 | 2025-08-26 | Agiloft Release 28 contains several accounts with default credentials that could allow local privilege escalation. The password hash is known for at least one… |
CVE-2025-35113 | Medium | 5.9 | 2025-08-26 | Agiloft Release 28 does not properly neutralize special elements used in an EUI template engine, allowing an authenticated attacker to achieve remote code exec… |
CVE-2025-35112 | Medium | 4.1 | 2025-08-26 | Agiloft Release 28 contains an XML External Entities vulnerability in any table that allows 'import/export', allowing an authenticated attacker to import the t… |