CyberSecBulletin

CronosWeb i2A vulnerabilities

We track 1 vulnerability in CronosWeb i2A products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on December 10, 2025.

1vulnerabilities
0critical
1high
0exploited
8.3average CVSS score

Latest CronosWeb i2A vulnerabilities

  • 8.3 High severity

    CronosWeb: Authorization Bypass Through User-Controlled Key

    CVE-2025-41358CronosWeb i2A

    Direct Object Reference Vulnerability (IDOR) in i2A's CronosWeb, in versions prior to 25.00.00.12, inclusive. This vulnerability could allow an authenticated attacker to access other users' documents by manipulating the ‘documentCode’ parameter in '/CronosWeb/