← Back

Apryse

apryse

3 CVEs • 2 products

Products (2)

Click to collapse
Toggle
Html2pdf
html2pdf
2 CVEs
Webviewer
webviewer
1 CVE

CVEs (3)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2025-56590
1Apryse
1Html2pdf
Feb 12, 2026
Jan 22, 2026
N/A· v4
9.8 CRITICAL· v3
N/A· v2
An issue was discovered in the InsertFromURL() function of the Apryse HTML2PDF SDK thru 11.10. This vulnerability could allow an attacker to execute arbitrary operating system commands on the local server.
CVE-2025-56589
1Apryse
1Html2pdf
Feb 2, 2026
Jan 22, 2026
N/A· v4
7.5 HIGH· v3
N/A· v2
A Local File Inclusion (LFI) and a Server-Side Request Forgery (SSRF) vulnerability was found in the InsertFromHtmlString() function of the Apryse HTML2PDF SDK thru 11.6.0. These vulnerabilities could allow an attacker t...Show more
A Local File Inclusion (LFI) and a Server-Side Request Forgery (SSRF) vulnerability was found in the InsertFromHtmlString() function of the Apryse HTML2PDF SDK thru 11.6.0. These vulnerabilities could allow an attacker to read local files on the server or make arbitrary HTTP requests to internal or external services. Both vulnerabilities could lead to the disclosure of sensitive data or potential system takeover.Show less
CVE-2024-57240
1Apryse
1Webviewer
Jul 10, 2025
Mar 3, 2025
N/A· v4
5.4 MEDIUM· v3
N/A· v2
A Cross-Site Scripting (XSS) vulnerability in the Rendering Engine component in Apryse WebViewer v11.1 and earlier allows attackers to execute arbitrary code via a crafted PDF file.