Galaxy Software Services

7 CVEs across 1 Galaxy Software Services products. Browse Galaxy Software Services vulnerabilities, severities, and proof-of-concept exploits.

Galaxy Software Services products with known CVEs

ProductCVEs
Vitals Esp7
Galaxy Software Services CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-4640High7.52026-03-24Vitals ESP developed by Galaxy Software Services has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to execute certain funct…
CVE-2026-4639High8.82026-03-24Vitals ESP developed by Galaxy Software Services has a Incorrect Authorization vulnerability, allowing authenticated remote attackers to perform certain admini…
CVE-2025-14255Medium6.52025-12-08Vitals ESP developed by Galaxy Software Services has a SQL Injection vulnerability, allowing authenticated remote attackers to inject arbitrary SQL commands to…
CVE-2025-14254Medium6.52025-12-08Vitals ESP developed by Galaxy Software Services has a SQL Injection vulnerability, allowing authenticated remote attackers to inject arbitrary SQL commands to…
CVE-2025-14253Medium4.92025-12-08Vitals ESP developed by Galaxy Software Services has an Arbitrary File Read vulnerability, allowing privileged remote attackers to exploit Absolute Path Traver…
CVE-2023-41357High8.82023-11-03Galaxy Software Services Corporation Vitals ESP is an online knowledge base management portal, it has insufficient filtering and validation during file upload…
CVE-2023-37291High8.62023-07-21Galaxy Software Services Vitals ESP is vulnerable to using a hard-coded encryption key. An unauthenticated remote attacker can generate a valid token parameter…