Ragic

10 CVEs across 4 Ragic products. Browse Ragic vulnerabilities, severities, and proof-of-concept exploits.

Ragic products with known CVEs

ProductCVEs
Enterprise Cloud Database8
Enterprise Cloud Database6
No-Code Database Builder1
Ragic1
Ragic CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-15553Medium5.32026-07-13Enterprise Cloud Database developed by Ragic has a Arbitrary File Upload vulnerability, allowing unauthenticated remote attackers to upload malicious files and…
CVE-2026-15552Medium6.12026-07-13Enterprise Cloud Database developed by Ragic has a Stored Cross-Site Scripting vulnerability, allowing unauthenticated remote attackers to inject persistent Ja…
CVE-2025-15016Critical9.82025-12-22Enterprise Cloud Database developed by Ragic has a Hard-coded Cryptographic Key vulnerability, allowing unauthenticated remote attackers to exploit the fixed k…
CVE-2025-15015High7.52025-12-22Enterprise Cloud Database developed by Ragic has a Arbitrary File Read vulnerability, allowing unauthenticated remote attackers to exploit Relative Path Traver…
CVE-2025-11675High7.22025-10-13Enterprise Cloud Database developed by Ragic has an Arbitrary File Upload vulnerability, allowing privileged remote attackers to upload and execute web shell b…
CVE-2024-9985Critical10.02024-10-15Enterprise Cloud Database from Ragic does not properly validate the file type for uploads. Attackers with regular privileges can upload a webshell and use it t…
CVE-2024-9984Critical9.82024-10-15Enterprise Cloud Database from Ragic does not authenticate access to specific functionality, allowing unauthenticated remote attackers to use this functionalit…
CVE-2024-9983High7.52024-10-15Enterprise Cloud Database from Ragic does not properly validate a specific page parameter, allowing unauthenticated remote attackers to exploit this vulnerabil…
CVE-2023-41343Medium5.42023-11-03Rogic No-Code Database Builder's file uploading function has insufficient filtering for special characters. A remote attacker with regular user privilege can i…
CVE-2022-40739Medium5.42022-10-31Ragic report generation page has insufficient filtering for special characters. A remote attacker with general user privilege can inject JavaScript to perform…