Product by Cert/cc

    Vince

    10 known vulnerabilities in Vince (Cert/cc), 0 of them actively exploited (CISA KEV).

    Key figures

    10

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    1

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Vince (Cert/cc)
    HighCVE-2022-40238

    A Remote Code Injection vulnerability exists in CERT software prior to version 1.50.5

    also in 2 other products

    		8.8
    CriticalCVE-2026-18749

    CERT/CC VINCE: Authorization Bypass Through User-Controlled Key

    		9.8
    MediumCVE-2026-18744

    CERT/CC VINCE: Authorization Bypass Through User-Controlled Key

    		6.5
    MediumCVE-2026-18750

    CERT/CC VINCE: Authorization Bypass Through User-Controlled Key

    		5.3
    MediumCVE-2022-25799

    An open redirect vulnerability exists in CERT/CC VINCE software prior to version 1.50.0

    also in 2 other products

    		6.1
    MediumCVE-2026-8142

    CERT/CC VINCE: security vulnerability

    		6.5
    MediumCVE-2024-9953

    Potential DoS Vulnerability in CERT VINCE Software Before Version 3.0.8

    also in 2 other products

    		4.9
    MediumCVE-2022-40248

    An HTML injection vulnerability exists in CERT/CC VINCE software prior to version 1.50.4

    also in 2 other products

    		5.4
    MediumCVE-2024-10469

    CERT/CC VINCE: Incorrect Default Permissions

    also in 1 other product

    		6.5
    MediumCVE-2022-40257

    An HTML injection vulnerability exists in CERT/CC VINCE software prior to version 1.50.4

    also in 2 other products

    		5.4

    News

    All products by Cert/cc