Browse CVEs

HIGH 8.1 CVE-2025-11853 A vulnerability was determined in Sismics Teedy up to 1.11. This affects an unknown function of the file /api/file of the component API Endpoint. Exe… Teedy after 1.11 Fix from $1,9502025-10-16 CRITICAL 9.8 CVE-2024-54852 When LDAP connection is activated in Teedy versions between 1.9 to 1.12, the username field of the login form is vulnerable to LDAP injection. Due to… Teedy after 1.12 Fix from $2,3002025-01-29 HIGH 8.8 CVE-2024-54851 Teedy <= 1.12 is vulnerable to Cross Site Request Forgery (CSRF), due to the lack of CSRF protection. Teedy after 1.12 Fix from $1,9502025-01-29 HIGH 7.5 CVE-2025-22963 Teedy through 1.11 allows CSRF for account takeover via POST /api/user/admin. Teedy after 1.11 Fix from $1,9502025-01-13 HIGH 8.4 CVE-2024-46278 Teedy 1.11 is vulnerable to Cross Site Scripting (XSS) via the management console. Teedy No fix yet Fix from $1,9502024-10-07 CRITICAL 9.6 CVE-2022-22114 In Teedy, versions v1.5 through v1.9 are vulnerable to Reflected Cross-Site Scripting (XSS). The “search term" search functionality is not sufficient… Teedy after 1.9 Fix from $2,3002022-01-10 CRITICAL 9.0 CVE-2022-22115 In Teedy, versions v1.5 through v1.9 are vulnerable to Stored Cross-Site Scripting (XSS) in the name of a created Tag. Since the Tag name is not bein… Teedy after 1.9 Fix from $2,3002022-01-10