PatchTheCVEtestmanagement vulnerabilities
Recent CVEs affecting testmanagement products. 2 tracked.
testmanagement has 2 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 0. Most recent: 2025-11-17. Highest priority: CVE-2025-63747 (score 54/100).
- CVE-2025-63748 HIGH 8.8 DOWNGRADE QaTraq 6.9.2 allows authenticated users to upload arbitrary files via the "Add Attachment" feature in the "Tes
- CVE-2025-63747 CRITICAL 9.8 DOWNGRADE QaTraq 6.9.2 ships with administrative account credentials which are enabled in default installations and perm
FAQ
How do I fix testmanagement vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is testmanagement being exploited right now?
None of the tracked testmanagement CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which testmanagement CVE should I patch first?
CVE-2025-63747 currently ranks highest (54/100): QaTraq 6.9.2 ships with administrative account credentials which are enabled in default installations and perm.