Gss

9 CVEs across 3 Gss products. Browse Gss vulnerabilities, severities, and proof-of-concept exploits.

Gss products with known CVEs

ProductCVEs
Vitalsesp5
Iota C.ai2
Vitals Enterprise Social Platform2
Gss CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-4640High7.52026-03-24Vitals ESP developed by Galaxy Software Services has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to execute certain funct…
CVE-2026-4639High8.82026-03-24Vitals ESP developed by Galaxy Software Services has a Incorrect Authorization vulnerability, allowing authenticated remote attackers to perform certain admini…
CVE-2025-14255Medium6.52025-12-08Vitals ESP developed by Galaxy Software Services has a SQL Injection vulnerability, allowing authenticated remote attackers to inject arbitrary SQL commands to…
CVE-2025-14254Medium6.52025-12-08Vitals ESP developed by Galaxy Software Services has a SQL Injection vulnerability, allowing authenticated remote attackers to inject arbitrary SQL commands to…
CVE-2025-14253Medium4.92025-12-08Vitals ESP developed by Galaxy Software Services has an Arbitrary File Read vulnerability, allowing privileged remote attackers to exploit Absolute Path Traver…
CVE-2024-52959High7.22024-11-27A Improper Control of Generation of Code ('Code Injection') vulnerability in plugin management in iota C.ai Conversational Platform from 1.0.0 through 2.1.3 al…
CVE-2024-52958High7.22024-11-27A improper verification of cryptographic signature vulnerability in plugin management in iota C.ai Conversational Platform from 1.0.0 through 2.1.3 allows remo…
CVE-2023-41357High8.82023-11-03Galaxy Software Services Corporation Vitals ESP is an online knowledge base management portal, it has insufficient filtering and validation during file upload…
CVE-2023-37291High8.62023-07-21Galaxy Software Services Vitals ESP is vulnerable to using a hard-coded encryption key. An unauthenticated remote attacker can generate a valid token parameter…