Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

instantsoft — Vulnerabilities & Security Advisories 20

Browse all 20 CVE security advisories affecting instantsoft. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Instantsoft operates as a provider of enterprise software solutions, primarily focusing on document management and workflow automation systems. Security audits have identified twenty distinct Common Vulnerabilities and Exposures (CVEs) associated with its platform, indicating a history of significant security oversight. The most prevalent vulnerability classes include remote code execution (RCE) and cross-site scripting (XSS), which allow attackers to execute arbitrary commands or inject malicious scripts into web pages. Additionally, instances of privilege escalation have been documented, enabling unauthorized users to gain elevated access rights within the system. These flaws often stem from insufficient input validation and improper access control mechanisms. While no single catastrophic data breach has been widely publicized, the cumulative nature of these CVEs suggests systemic weaknesses in the software’s architecture. Organizations relying on Instantsoft must prioritize rigorous patch management and continuous security monitoring to mitigate these known risks effectively.

Found 15 results / 20Clear Filters
Top products by instantsoft: instantsoft/icms2 icms2
CVE IDTitleCVSSSeverityPublished
CVE-2023-4928 SQL Injection in instantsoft/icms2 — instantsoft/icms2CWE-89 9.8 -2023-09-13
CVE-2023-4879 Cross-site Scripting (XSS) - Stored in instantsoft/icms2 — instantsoft/icms2CWE-79 5.4 -2023-09-10
CVE-2023-4878 Server-Side Request Forgery (SSRF) in instantsoft/icms2 — instantsoft/icms2CWE-918 7.5 -2023-09-10
CVE-2023-4704 External Control of System or Configuration Setting in instantsoft/icms2 — instantsoft/icms2CWE-15 9.4 -2023-09-01
CVE-2023-4654 Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in instantsoft/icms2 — instantsoft/icms2CWE-614 5.3 -2023-08-31
CVE-2023-4655 Cross-site Scripting (XSS) - Reflected in instantsoft/icms2 — instantsoft/icms2CWE-79 6.1 -2023-08-31
CVE-2023-4653 Cross-site Scripting (XSS) - Stored in instantsoft/icms2 — instantsoft/icms2CWE-79 5.4 -2023-08-31
CVE-2023-4651 Server-Side Request Forgery (SSRF) in instantsoft/icms2 — instantsoft/icms2CWE-918 7.5 -2023-08-31
CVE-2023-4650 Improper Access Control in instantsoft/icms2 — instantsoft/icms2CWE-284 6.5 -2023-08-31
CVE-2023-4649 Session Fixation in instantsoft/icms2 — instantsoft/icms2CWE-384 7.6 -2023-08-31
CVE-2023-4652 Cross-site Scripting (XSS) - Stored in instantsoft/icms2 — instantsoft/icms2CWE-79 5.4 -2023-08-31
CVE-2023-4381 Unverified Password Change in instantsoft/icms2 — instantsoft/icms2CWE-620 9.8 -2023-08-16
CVE-2023-4189 Cross-site Scripting (XSS) - Reflected in instantsoft/icms2 — instantsoft/icms2CWE-79 6.1 -2023-08-05
CVE-2023-4188 SQL Injection in instantsoft/icms2 — instantsoft/icms2CWE-89 9.8 -2023-08-05
CVE-2023-4187 Cross-site Scripting (XSS) - Stored in instantsoft/icms2 — instantsoft/icms2CWE-79 5.4 -2023-08-05

This page lists every published CVE security advisory associated with instantsoft. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.