AES vulnerabilities

2 known vulnerabilities in AES from Altium. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.6 High severity

  AES: Improper Neutralization of Input During Web Page Generation

  CVE-2025-27380Jan 22, 2026Altium

  HTML injection in Project Release in Altium Enterprise Server (AES) 7.0.3 on all platforms allows an authenticated attacker to execute arbitrary JavaScript in the victim’s browser via crafted HTML content.

• 9.8 Critical severity

  AES contains a SQL injection vulnerability due to an inactive configuration that prevents the…

  CVE-2025-27378Jan 22, 2026Altium

  AES contains a SQL injection vulnerability due to an inactive configuration that prevents the latest SQL parsing logic from being applied. When this configuration is not enabled, crafted input may be improperly handled, allowing attackers to inject and execute