Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2025-0640

IDOR in Akinsoft's OctoCloud

Authorization Bypass Through User-Controlled Key vulnerability in Akinsoft OctoCloud allows Resource Leak Exposure. This issue affects OctoCloud: from s1.09.02 before v1.11.01.

CVSS 3.1 · 4.7 Medium EPSS < 1% KEV · Not listed
Vendors
Akinsoft
Products
Octocloud
CVE-2025-2414

OTP Bypass in Akinsoft's OctoCloud

Improper Restriction of Excessive Authentication Attempts vulnerability in Akinsoft OctoCloud allows Authentication Bypass. This issue affects OctoCloud: from s1.09.03 before v1.11.01.

CVSS 3.1 · 8.6 High EPSS < 1% KEV · Not listed
Vendors
Akinsoft
Products
Octocloud
CVE-2024-12972

XSS in Akinsoft's OctoCloud

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Akinsoft OctoCloud allows Cross-Site Scripting (XSS). This issue affects OctoCloud: from s1.09.01 before v1.11.01.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Akinsoft
Products
Octocloud
CVE-2024-12973

Host Header Injection in Akinsoft's OctoCloud

Origin Validation Error vulnerability in Akinsoft OctoCloud allows HTTP Response Splitting, CAPEC - 87 - Forceful Browsing. This issue affects OctoCloud: from s1.09.01 before v1.11.01.

CVSS 3.1 · 4.7 Medium EPSS < 1% KEV · Not listed
Vendors
Akinsoft
Products
Octocloud