CyberSecBulletin

OutSystems vulnerabilities

We track 2 vulnerabilities in OutSystems products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on December 9, 2025.

2vulnerabilities
0critical
2high
0exploited
7.7average CVSS score

Latest OutSystems vulnerabilities

  • 7.5 High severity

    Platform Server: Inconsistent Interpretation of HTTP Requests

    CVE-2025-61258OutSystems

    Outsystems Platform Server 11.18.1.37828 allows attackers to cause a denial of service via a crafted content-length value mismatching the body length. NOTE: the Supplier indicates that they are unable to reproduce this.

  • 7.8 High severity

    Service Studio: Uncontrolled Search Path Element

    CVE-2022-47636OutSystemsEPSS 1.28%

    A DLL hijacking vulnerability has been discovered in OutSystems Service Studio 11 11.53.30 build 61739. When a user open a .oml file (OutSystems Modeling Language), the application will load the following DLLs from the same directory av_libGLESv2.dll, libcef.D