academia student information system vulnerabilities and fixes

Recent CVEs affecting academia student information system, with upgrade or downgrade steps. 7 tracked.

Also searched as: academiastudentinformationsystem.

academia student information system has 7 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 0. Most recent: 2025-03-03. Highest priority: CVE-2025-27583 (score 44/100).

• CVE-2025-27585 MEDIUM 5.4 DOWNGRADE A stored cross-site scripting (XSS) vulnerability in Serosoft Solutions Pvt Ltd Academia Student Information S
• CVE-2025-27584 MEDIUM 5.4 DOWNGRADE A stored cross-site scripting (XSS) vulnerability in Serosoft Solutions Pvt Ltd Academia Student Information S
• CVE-2025-27583 CRITICAL 9.1 DOWNGRADE Incorrect access control in the component /rest/staffResource/findAllUsersAcrossOrg of Serosoft Solutions Pvt
• CVE-2025-25953 MEDIUM 6.5 DOWNGRADE Serosoft Solutions Pvt Ltd Academia Student Information System (SIS) EagleR v1.0.118 was discovered to contain
• CVE-2025-25952 MEDIUM 6.5 DOWNGRADE An Insecure Direct Object References (IDOR) in the component /getStudemtAllDetailsById?studentId=XX of Serosof
• CVE-2025-25951 HIGH 7.5 DOWNGRADE An information disclosure vulnerability in the component /rest/cb/executeBasicSearch of Serosoft Solutions Pvt
• CVE-2025-25950 HIGH 8.1 DOWNGRADE Incorrect access control in the component /rest/staffResource/update of Serosoft Solutions Pvt Ltd Academia St

FAQ

How do I fix academia student information system vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is academia student information system being exploited right now?

None of the tracked academia student information system CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which academia student information system CVE should I patch first?

CVE-2025-27583 currently ranks highest (44/100): Incorrect access control in the component /rest/staffResource/findAllUsersAcrossOrg of Serosoft Solutions Pvt .

RSS feed for academia student information system · ← Back to latest CVEs