← Back

Mapsuite

mapsuite

Vendor: Infoware • 3 CVEs

CVEs (3)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Infoware
1Mapsuite
Nov 21, 2024
Jan 31, 2020
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in infoware MapSuite MapAPI 1.0.x before 1.0.36 and 1.1.x before 1.1.49 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
1Infoware
1Mapsuite
May 6, 2026
Dec 1, 2014
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Server-side request forgery (SSRF) vulnerability in the MapAPI in Infoware MapSuite before 1.0.36 and 1.1.x before 1.1.49 allows remote attackers to trigger requests to intranet servers via unspecified vectors.
1Infoware
1Mapsuite
May 6, 2026
Dec 1, 2014
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Absolute path traversal vulnerability in the MapAPI in Infoware MapSuite before 1.0.36 and 1.1.x before 1.1.49 allows remote attackers to read arbitrary files via unspecified vectors.