PatchTheCVEserosoft vulnerabilities
Recent CVEs affecting serosoft products. 7 tracked.
serosoft has 7 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 0. Most recent: 2025-03-03. Highest priority: CVE-2025-27583 (score 44/100).
- CVE-2025-27585 MEDIUM 5.4 DOWNGRADE A stored cross-site scripting (XSS) vulnerability in Serosoft Solutions Pvt Ltd Academia Student Information S
- CVE-2025-27584 MEDIUM 5.4 DOWNGRADE A stored cross-site scripting (XSS) vulnerability in Serosoft Solutions Pvt Ltd Academia Student Information S
- CVE-2025-27583 CRITICAL 9.1 DOWNGRADE Incorrect access control in the component /rest/staffResource/findAllUsersAcrossOrg of Serosoft Solutions Pvt
- CVE-2025-25953 MEDIUM 6.5 DOWNGRADE Serosoft Solutions Pvt Ltd Academia Student Information System (SIS) EagleR v1.0.118 was discovered to contain
- CVE-2025-25952 MEDIUM 6.5 DOWNGRADE An Insecure Direct Object References (IDOR) in the component /getStudemtAllDetailsById?studentId=XX of Serosof
- CVE-2025-25951 HIGH 7.5 DOWNGRADE An information disclosure vulnerability in the component /rest/cb/executeBasicSearch of Serosoft Solutions Pvt
- CVE-2025-25950 HIGH 8.1 DOWNGRADE Incorrect access control in the component /rest/staffResource/update of Serosoft Solutions Pvt Ltd Academia St
FAQ
How do I fix serosoft vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is serosoft being exploited right now?
None of the tracked serosoft CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which serosoft CVE should I patch first?
CVE-2025-27583 currently ranks highest (44/100): Incorrect access control in the component /rest/staffResource/findAllUsersAcrossOrg of Serosoft Solutions Pvt .