Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

instantsoft — Vulnerabilities & Security Advisories 22

Browse all 22 CVE security advisories affecting instantsoft. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Instantsoft operates as a provider of enterprise software solutions, primarily focusing on document management and workflow automation systems. Security audits have identified twenty distinct Common Vulnerabilities and Exposures (CVEs) associated with its platform, indicating a history of significant security oversight. The most prevalent vulnerability classes include remote code execution (RCE) and cross-site scripting (XSS), which allow attackers to execute arbitrary commands or inject malicious scripts into web pages. Additionally, instances of privilege escalation have been documented, enabling unauthorized users to gain elevated access rights within the system. These flaws often stem from insufficient input validation and improper access control mechanisms. While no single catastrophic data breach has been widely publicized, the cumulative nature of these CVEs suggests systemic weaknesses in the software’s architecture. Organizations relying on Instantsoft must prioritize rigorous patch management and continuous security monitoring to mitigate these known risks effectively.

Found 15 results / 22 Clear Filters
Top products by instantsoft: instantsoft/icms2 icms2
CVE ID Title CVSS Severity Published
CVE-2023-4928 SQL Injection in instantsoft/icms2 — instantsoft/icms2 CWE-89 9.8 - 2023-09-13
CVE-2023-4879 Cross-site Scripting (XSS) - Stored in instantsoft/icms2 — instantsoft/icms2 CWE-79 5.4 - 2023-09-10
CVE-2023-4878 Server-Side Request Forgery (SSRF) in instantsoft/icms2 — instantsoft/icms2 CWE-918 7.5 - 2023-09-10
CVE-2023-4704 External Control of System or Configuration Setting in instantsoft/icms2 — instantsoft/icms2 CWE-15 9.4 - 2023-09-01
CVE-2023-4654 Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in instantsoft/icms2 — instantsoft/icms2 CWE-614 5.3 - 2023-08-31
CVE-2023-4655 Cross-site Scripting (XSS) - Reflected in instantsoft/icms2 — instantsoft/icms2 CWE-79 6.1 - 2023-08-31
CVE-2023-4653 Cross-site Scripting (XSS) - Stored in instantsoft/icms2 — instantsoft/icms2 CWE-79 5.4 - 2023-08-31
CVE-2023-4651 Server-Side Request Forgery (SSRF) in instantsoft/icms2 — instantsoft/icms2 CWE-918 7.5 - 2023-08-31
CVE-2023-4650 Improper Access Control in instantsoft/icms2 — instantsoft/icms2 CWE-284 6.5 - 2023-08-31
CVE-2023-4649 Session Fixation in instantsoft/icms2 — instantsoft/icms2 CWE-384 7.6 - 2023-08-31
CVE-2023-4652 Cross-site Scripting (XSS) - Stored in instantsoft/icms2 — instantsoft/icms2 CWE-79 5.4 - 2023-08-31
CVE-2023-4381 Unverified Password Change in instantsoft/icms2 — instantsoft/icms2 CWE-620 9.8 - 2023-08-16
CVE-2023-4189 Cross-site Scripting (XSS) - Reflected in instantsoft/icms2 — instantsoft/icms2 CWE-79 6.1 - 2023-08-05
CVE-2023-4188 SQL Injection in instantsoft/icms2 — instantsoft/icms2 CWE-89 9.8 - 2023-08-05
CVE-2023-4187 Cross-site Scripting (XSS) - Stored in instantsoft/icms2 — instantsoft/icms2 CWE-79 5.4 - 2023-08-05

This page lists every published CVE security advisory associated with instantsoft. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.