Implem Inc.

9 CVEs across 2 Implem Inc. products. Browse Implem Inc. vulnerabilities, severities, and proof-of-concept exploits.

Implem Inc. products with known CVEs

ProductCVEs
Pleasanter7
Pleasanter (Community Edition And Enterprise Edition)2
Implem Inc. CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2025-61931Medium5.42025-10-24Pleasanter contains a stored cross-site scripting vulnerability in Body, Description and Comments, which allows an attacker to execute an arbitrary script in a…
CVE-2025-58070Medium6.12025-10-24Pleasanter contains a stored cross-site scripting vulnerability in Preview for Attachments, which allows an attacker to execute an arbitrary script in a logged…
CVE-2024-21584Medium6.12024-03-12Pleasanter 1.3.49.0 and earlier contains a cross-site scripting vulnerability. If an attacker tricks the user to access the product with a specially crafted UR…
CVE-2023-46688Medium6.12023-12-06Open redirect vulnerability in Pleasanter 1.3.47.0 and earlier allows a remote unauthenticated attacker to redirect users to arbitrary web sites via a speciall…
CVE-2023-45210Medium4.32023-12-06Pleasanter 1.3.47.0 and earlier contains an improper access control vulnerability, which may allow a remote authenticated attacker to view the temporary files…
CVE-2023-34439Medium5.42023-12-06Pleasanter 1.3.47.0 and earlier contains a stored cross-site scripting vulnerability. If this vulnerability is exploited, an arbitrary script may be executed o…
CVE-2023-32608Medium6.52023-06-30Directory traversal vulnerability in Pleasanter (Community Edition and Enterprise Edition) 1.3.39.2 and earlier versions allows a remote authenticated attacker…
CVE-2023-32607Medium5.42023-06-30Stored cross-site scripting vulnerability in Pleasanter (Community Edition and Enterprise Edition) 1.3.39.2 and earlier versions allows a remote authenticated…
CVE-2023-30758Medium5.42023-06-01Cross-site scripting vulnerability in Pleasanter 1.3.38.1 and earlier allows a remote authenticated attacker to inject an arbitrary script.