CVEs published January 12, 2025
13 CVEs were published on January 12, 2025: 0 critical, 1 high.
- Published
- 13
- Critical
- 0
- High
- 1
- Medium
- 9
- Low
- 3
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 1
Most affected products
- HCL Software DRYiCE MyXalytics
- 3
- 1902756969 reggie
- 2
- StarSea99 starsea-mall
- 2
- exelban stats
- 1
- IBM Jazz Foundation
- 1
- IBM Robotic Process Automation
- 1
- IBM watsonx.ai
- 1
- longpi1 warehouse
- 1
- reckcn SPPanAdmin
- 1
High 1
Medium, low and unrated 12
- CVE-2025-04021902756969 reggie CommonController.java upload unrestricted upload1902756969 reggie
- CVE-2025-04011902756969 reggie CommonController.java download path traversal1902756969 reggie
- CVE-2025-0400StarSea99 starsea-mall update cross site scriptingStarSea99 starsea-mall
- CVE-2025-0399StarSea99 starsea-mall uploadController.java UploadController unrestricted uploadStarSea99 starsea-mall
- CVE-2024-42181HCL MyXalytics is affected by a cleartext transmission of sensitive information vulnerabilityHCL Software DRYiCE MyXalytics
- CVE-2024-42180HCL MyXalytics is affected by a malicious file upload vulnerabilityHCL Software DRYiCE MyXalytics
- CVE-2024-42179HCL MyXalytics is affected by sensitive information disclosure vulnerabilityHCL Software DRYiCE MyXalytics
- CVE-2025-0398longpi1 warehouse Backend updateInport cross site scriptinglongpi1 warehouse
- CVE-2024-51456IBM Robotic Process Automation information disclosureIBM Robotic Process Automation
- CVE-2025-0397reckcn SPPanAdmin edit cross site scriptingreckcn SPPanAdmin
- CVE-2021-29669IBM Jazz Foundation cross-site scriptingIBM Jazz Foundation
- CVE-2024-49785IBM watsonx.ai cross-site scriptingIBM watsonx.ai