Cemtan vulnerabilities
We track 3 vulnerabilities in Cemtan products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on October 14, 2026.
Latest Cemtan vulnerabilities
- 7.3 High severity
sar2html: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability was found in cemtan sar2html 4.0.0. The affected element is the function updateDb of the file sar2html.py of the component Archive Processing. The manipulation of the argument s2host results in sql injection. The attack can be launched remotely
- 7.3 High severity
sar2html: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A weakness has been identified in cemtan sar2html 4.0.0. Affected by this issue is the function index of the file sar2html.py. This manipulation of the argument sort causes sql injection. The attack is possible to be carried out remotely. The exploit has been
- 7.3 High severity
sar2html: Use of Hard-coded Password
A security flaw has been discovered in cemtan sar2html 4.0.0. Affected by this vulnerability is an unknown functionality of the file sar2html.py. The manipulation of the argument SECRET_KEY results in hard-coded credentials. The attack can be executed remotely