Sergestec

4 CVEs across 2 Sergestec products. Browse Sergestec vulnerabilities, severities, and proof-of-concept exploits.

Sergestec products with known CVEs

ProductCVEs
Exito3
Sistick2
Sergestec CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2025-41021Medium5.42025-10-16Stored Cross-Site Scripting (XSS) in Sergestec's Exito v8.0, consisting of a stored XSS due to a lack of proper validation of user input by sending a POST requ…
CVE-2025-41020High7.52025-10-16Insecure direct object reference (IDOR) vulnerability in Sergestec's Exito v8.0. This vulnerability allows an attacker to access data belonging to other custom…
CVE-2025-410192025-10-16SQL injection in Sergestec's SISTICK v7.2. This vulnerability allows an attacker to retrieve, create, update, and delete databases through the 'id' parameter i…
CVE-2025-41018Critical9.82025-10-16SQL injection in Sergestec's Exito v8.0. This vulnerability allows an attacker to retrieve, create, update, and delete databases through the 'cat' parameter in…