Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2021-47722

Zucchetti Axess CLOKI Access Control 1.64 Cross-Site Request Forgery

Zucchetti Axess CLOKI Access Control 1.64 contains a cross-site request forgery vulnerability that allows attackers to manipulate access control settings without user interaction. Attackers can craft malicious web pages with hidden forms to disable or modify access control parameters by tricking authenticated users into loading the page.

CVSS 4.0 · 5.1 Medium EPSS < 1% KEV · Not listed
Vendors
Zucchetti
Products
Axess Cloki Access Control
CVE-2026-30695

Zucchetti Axess Web Interface XSS via dirBrowse Parameter

A Cross-Site Scripting (XSS) vulnerability exists in the web-based configuration interface of Zucchetti Axess access control devices, including XA4, X3/X3BIO, X4, X7, and XIO / i-door / i-door+. The vulnerability is caused by improper sanitization of user-supplied input in the dirBrowse parameter of the /file_manager.cgi endpoint.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Zucchetti
Products
Axess