Sunbird

9 CVEs across 4 Sunbird products. Browse Sunbird vulnerabilities, severities, and proof-of-concept exploits.

Sunbird products with known CVEs

ProductCVEs
Sunbirded-Portal7
Dcim Dctrack2
Iq2
Power Iq1
Sunbird CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2025-70027High7.52026-03-11An issue pertaining to CWE-918: Server-Side Request Forgery was discovered in Sunbird-Ed SunbirdEd-portal v1.13.4. This allows attackers to obtain sensitive in…
CVE-2025-70028High7.52026-03-09An issue pertaining to CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') was discovered in Sunbird-Ed SunbirdEd-portal v1…
CVE-2025-70031High8.82026-03-09An issue pertaining to CWE-352: Cross-Site Request Forgery was discovered in Sunbird-Ed SunbirdEd-portal v1.13.4.
CVE-2025-70030High7.52026-03-09An issue pertaining to CWE-1333: Inefficient Regular Expression Complexity (4.19) was discovered in Sunbird-Ed SunbirdEd-portal v1.13.4.
CVE-2025-70032Medium6.12026-03-09An issue pertaining to CWE-601: URL Redirection to Untrusted Site was discovered in Sunbird-Ed SunbirdEd-portal v1.13.4.
CVE-2025-70033Medium5.42026-03-09An issue pertaining to CWE-79: Improper Neutralization of Input During Web Page Generation was discovered in Sunbird-Ed SunbirdEd-portal v1.13.4.
CVE-2025-70029High7.52026-02-11An issue in Sunbird-Ed SunbirdEd-portal v1.13.4 allows attackers to obtain sensitive information. The application disables TLS/SSL certificate validation by se…
CVE-2025-66238High7.22025-12-04DCIM dcTrack allows an attacker to misuse certain remote access features. An authenticated user with access to the appliance's virtual console could exploit th…
CVE-2025-66237Medium6.72025-12-04DCIM dcTrack platforms utilize default and hard-coded credentials for access. An attacker could use these credentials to administer the database, escalate priv…