Eveo Urve Web Manager
5 CVEs affecting Eveo Urve Web Manager. Latest disclosed: 2025-07-21. Critical: 1, High: 4.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-36846 | Critical | 9.8 | 2025-07-21 | An issue was discovered in Eveo URVE Web Manager 27.02.2025. The application exposes a /_internal/pc/vpro.php localhost endpoint to unauthenticated users that… |
CVE-2025-36845 | High | 8.6 | 2025-07-21 | An issue was discovered in Eveo URVE Web Manager 27.02.2025. The endpoint /_internal/redirect.php allows for Server-Side Request Forgery (SSRF). The endpoint t… |
CVE-2022-2420 | High | 8.0 | 2022-07-15 | A vulnerability was found in URVE Web Manager. It has been rated as critical. This issue affects some unknown processing of the file _internal/uploader.php. Th… |
CVE-2022-2419 | High | 8.0 | 2022-07-15 | A vulnerability was found in URVE Web Manager. It has been declared as critical. This vulnerability affects unknown code of the file _internal/collector/upload… |
CVE-2022-2418 | High | 8.0 | 2022-07-15 | A vulnerability was found in URVE Web Manager. It has been classified as critical. This affects an unknown part of the file kreator.html5/img_upload.php. The m… |