Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2026-111634

Helical Insight through 7.0.0 SQL Injection via /executeDatasource

Helical Insight through 7.0.0 contains an sql injection vulnerability that allows authenticated viewers to inject SQL through unescaped report parameter values sent to /executeDatasource. Attackers can supply crafted Numeric or String placeholder values that bypass the broken SqlDetect guard to read unexposed tables and modify data in the report's data source.

CVSS 4.0 · 8.6 High EPSS < 1% KEV · Not listed
Vendors
Helicalinsight
Products
Helicalinsight
CVE-2026-111635

Helical Insight through 7.0.0 Path Traversal via /getExternalResource

Helical Insight through 7.0.0 contains a path traversal vulnerability that allows authenticated viewers to read files outside the solution directory via the path parameter of /getExternalResource. Attackers can supply parent-directory segments to read any readable file with an allowed extension such as js, json, or html, bypassing per-resource access control.

CVSS 4.0 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Helicalinsight
Products
Helicalinsight