Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 16

Export CSV
CVE-2026-59668

Multiple vulnerabilities in the Repasat application

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary code in the victim’s browser. The “nomTamano” parameter is affected – endpoint “/es/companysizebills/store”.

CVSS 4.0 · 4.8 Medium EPSS < 1% KEV · Not listed
Vendors
Repasat
Products
Repasat Application
CVE-2026-59667

Multiple vulnerabilities in the Repasat application

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary code in the victim’s browser. The “nomTamano” parameter is affected – endpoint “/es/companysizemployees/update”.

CVSS 4.0 · 4.8 Medium EPSS < 1% KEV · Not listed
Vendors
Repasat
Products
Repasat Application
CVE-2026-59666

Multiple vulnerabilities in the Repasat application

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary code in the victim’s browser. The “nomOrigen” parameter is affected – endpoint “/es/origins/store”.

CVSS 4.0 · 4.8 Medium EPSS < 1% KEV · Not listed
Vendors
Repasat
Products
Repasat Application
CVE-2026-59665

Multiple vulnerabilities in the Repasat application

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary code in the victim’s browser. The “nomMotivo” parameter is affected – endpoint “/es/lostmotives/store”.

CVSS 4.0 · 4.8 Medium EPSS < 1% KEV · Not listed
Vendors
Repasat
Products
Repasat Application
CVE-2026-59664

Multiple vulnerabilities in the Repasat application

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary code in the victim’s browser. The “nomServicioPrestado” parameter is affected – endpoint “/es/providedservices/store”.

CVSS 4.0 · 4.8 Medium EPSS < 1% KEV · Not listed
Vendors
Repasat
Products
Repasat Application
CVE-2026-59663

Multiple vulnerabilities in the Repasat application

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary code in the victim’s browser. The “nomDelegacion” parameter is affected – endpoint “/es/delegations/store”.

CVSS 4.0 · 4.8 Medium EPSS < 1% KEV · Not listed
Vendors
Repasat
Products
Repasat Application
CVE-2026-59662

Multiple vulnerabilities in the Repasat application

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary code in the victim’s browser. The “nomCompetidor” parameter is affected – endpoint “/es/competitors/store”.

CVSS 4.0 · 4.8 Medium EPSS < 1% KEV · Not listed
Vendors
Repasat
Products
Repasat Application
CVE-2026-59661

Multiple vulnerabilities in the Repasat application

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary code in the victim’s browser. The “nomRuta” parameter is affected – endpoint “/es/routes/update/693”.

CVSS 4.0 · 4.8 Medium EPSS < 1% KEV · Not listed
Vendors
Repasat
Products
Repasat Application
CVE-2026-59660

Multiple vulnerabilities in the Repasat application

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary code in the victim’s browser. The “nomTransportista” parameter is affected – endpoint “/es/carriers/update”.

CVSS 4.0 · 4.8 Medium EPSS < 1% KEV · Not listed
Vendors
Repasat
Products
Repasat Application
CVE-2026-59659

Multiple vulnerabilities in the Repasat application

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary code in the victim’s browser. The “nomZonaGeo” parameter is affected – endpoint “/es/geozones/update/149979”.

CVSS 4.0 · 4.8 Medium EPSS < 1% KEV · Not listed
Vendors
Repasat
Products
Repasat Application
CVE-2026-59673

Multiple vulnerabilities in the Repasat application

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary code in the victim’s browser. The “nomTipoCli” parameter is affected – endpoint “/es/clientypes/update/109441”.

CVSS 4.0 · 4.8 Medium EPSS < 1% KEV · Not listed
Vendors
Repasat
Products
Repasat Application
CVE-2026-59672

Multiple vulnerabilities in the Repasat application

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary code in the victim’s browser. The “nomGrupoEmpresarial” parameter is affected – endpoint "/es/corporategroups/update/246”.

CVSS 4.0 · 4.8 Medium EPSS < 1% KEV · Not listed
Vendors
Repasat
Products
Repasat Application
CVE-2026-59671

Multiple vulnerabilities in the Repasat application

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary code in the victim’s browser. The endpoint “/es/datatables/getemployeetypesdatatable” is affected.

CVSS 4.0 · 4.8 Medium EPSS < 1% KEV · Not listed
Vendors
Repasat
Products
Repasat Application
CVE-2026-59670

Multiple vulnerabilities in the Repasat application

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary code in the victim’s browser. The “nomListaValidacion” parameter is affected – endpoint “/es/validationslists/assignList/Employee/45659”.

CVSS 4.0 · 4.8 Medium EPSS < 1% KEV · Not listed
Vendors
Repasat
Products
Repasat Application
CVE-2026-59669

Multiple vulnerabilities in the Repasat application

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary code in the victim’s browser. The “name” parameter is affected – endpoint “/es/attachmenttypes/update/203336”

CVSS 4.0 · 4.8 Medium EPSS < 1% KEV · Not listed
Vendors
Repasat
Products
Repasat Application
CVE-2026-95662

Multiple vulnerabilities in the Repasat application

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary code in the victim’s browser. The “nomCompetidor” parameter is affected – endpoint “/es/competitors/store”.

CVSS 4.0 · 4.8 Medium EPSS < 1% KEV · Not listed
Vendors
Repasat
Products
Repasat Application