Wolterskluwer

10 CVEs across 7 Wolterskluwer products. Browse Wolterskluwer vulnerabilities, severities, and proof-of-concept exploits.

Wolterskluwer products with known CVEs

ProductCVEs
A3factura4
B.point1
Lex Baza Dokumentow1
Teammate\+1
Teammate\+ Audit1
Teammate Audit Management1
Teammate Audit Management Software Suite1
Wolterskluwer CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-1493Medium5.42026-04-30LEX Baza Dokumentów is vulnerable to DOM-based XSS in "em" cookie parameter. The application unsafely processes the parameter on the client side, allowing an a…
CVE-2026-2680Medium6.12026-02-26Reflected Cross-Site Scripting (XSS) on the A3factura web platform, in parameter 'customerVATNumber', in 'a3factura-app.wolterskluwer.es/#/incomes/salesDeliver…
CVE-2026-2679Medium6.12026-02-26Reflected Cross-Site Scripting (XSS) on the A3factura web platform, in parameter 'customerName', in 'a3factura-app.wolterskluwer.es/#/incomes/salesInvoices' en…
CVE-2026-2678Medium6.12026-02-26Reflected Cross-Site Scripting (XSS) on the A3factura web platform, in parameter 'name', parameter 'name', in 'a3factura-app.wolterskluwer.es/#/incomes/custome…
CVE-2026-2677Medium6.12026-02-26Reflected Cross-Site Scripting (XSS) on the A3factura web platform, in parameter 'name', in 'a3factura-app.wolterskluwer.es/#/incomes/representatives-managemen…
CVE-2023-49328High7.22023-12-25On a Wolters Kluwer B.POINT 23.70.00 server running Linux on premises, during the authentication phase, a validated system user can achieve remote code executi…
CVE-2023-33438Medium5.42023-06-16A stored Cross-site scripting (XSS) vulnerability in Wolters Kluwer TeamMate+ 35.0.11.0 allows remote attackers to inject arbitrary web script or HTML.
CVE-2021-41932High8.82022-06-06A blind SQL injection vulnerability in search form in TeamMate+ Audit version 28.0.19.0 allows any authenticated user to create malicious SQL injections, which…
CVE-2021-44035Medium4.42021-12-17Wolters Kluwer TeamMate AM 12.4 Update 1 mishandles attachment uploads, such that an authenticated user may download and execute malicious files.
CVE-2010-31252010-08-26Untrusted search path vulnerability in TeamMate Audit Management Software Suite 8.0 patch 2 allows local users, and possibly remote attackers, to execute arbit…