4cstrategies vulnerabilities
Recent CVEs affecting 4cstrategies products. 7 tracked.
4cstrategies has 7 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 4. Most recent: 2025-08-07. Highest priority: CVE-2025-46658 (score 48/100).
- CVE-2024-55402 MEDIUM 5.3 UPGRADE 4C Strategies Exonaut before v22.4 was discovered to contain an access control issue.
- CVE-2024-55401 MEDIUM 6.5 UPGRADE An issue in 4C Strategies Exonaut before v22.4 allows attackers to execute a directory traversal.
- CVE-2024-55399 MEDIUM 6.5 UPGRADE 4C Strategies Exonaut before v21.6.2.1-1 was discovered to contain a Server-Side Request Forgery (SSRF).
- CVE-2024-55398 MEDIUM 6.5 UPGRADE 4C Strategies Exonaut before v22.4 was discovered to contain insecure permissions.
- CVE-2025-46660 MEDIUM 5.3 DOWNGRADE An issue was discovered in 4C Strategies Exonaut 21.6
- CVE-2025-46659 HIGH 7.5 DOWNGRADE An issue was discovered in ExonautWeb in 4C Strategies Exonaut 21.6
- CVE-2025-46658 CRITICAL 9.8 DOWNGRADE An issue was discovered in ExonautWeb in 4C Strategies Exonaut 21.6
FAQ
How do I fix 4cstrategies vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is 4cstrategies being exploited right now?
None of the tracked 4cstrategies CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which 4cstrategies CVE should I patch first?
CVE-2025-46658 currently ranks highest (48/100): An issue was discovered in ExonautWeb in 4C Strategies Exonaut 21.6.