Product by Cervantessec

    Cervantes

    7 known vulnerabilities in Cervantes (Cervantessec), 0 of them actively exploited (CISA KEV).

    Key figures

    7

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    0

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Cervantes (Cervantessec)
    HighCVE-2026-129427

    Stored XSS via avatar upload chained with an authentication bypass in /Attachments leads to ATO

    		8.7
    MediumCVE-2026-115993

    Stored XSS in the “Notes” field of project checklists

    		6.8
    HighCVE-2026-115975

    Broken access control in JiraController

    		7.1
    MediumCVE-2026-115994

    BOLA Allows Cross-Project Target Tampering

    		5.4
    MediumCVE-2026-115998

    IDOR: User reads and modifies findings from other people's projects

    		4.3
    MediumCVE-2024-42055

    Cervantes: Cross-Site Scripting (XSS)

    		6.1
    MediumCVE-2024-42054

    Cervantes: security vulnerability

    		5.4

    All products by Cervantessec