Sismics vulnerabilities
We track 4 vulnerabilities in Sismics products across 2 products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on October 16, 2025.
Latest Sismics vulnerabilities
- 8.1 High severity
Teedy: Incorrect Privilege Assignment
A vulnerability was determined in Sismics Teedy up to 1.11. This affects an unknown function of the file /api/file of the component API Endpoint. Executing a manipulation can lead to improper access controls. The attack may be performed from remote. The exploi
- 9.8 Critical severity
Teedy: Improper Neutralization of Special Elements used in an LDAP Query
When LDAP connection is activated in Teedy versions between 1.9 to 1.12, the username field of the login form is vulnerable to LDAP injection. Due to improper sanitization of user input, an unauthenticated attacker is then able to perform various malicious act
- 9.0 Critical severity
docs: Improper Neutralization of Input During Web Page Generation
In Teedy, versions v1.5 through v1.9 are vulnerable to Stored Cross-Site Scripting (XSS) in the name of a created Tag. Since the Tag name is not being sanitized properly in the edit tag page, a low privileged attacker can store malicious scripts in the name of
- 9.6 Critical severity
docs: Improper Neutralization of Input During Web Page Generation
In Teedy, versions v1.5 through v1.9 are vulnerable to Reflected Cross-Site Scripting (XSS). The “search term" search functionality is not sufficiently sanitized while displaying the results of the search, which can be leveraged to inject arbitrary scripts. Th