Terminalfour vulnerabilities
We track 2 vulnerabilities in Terminalfour products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on December 2, 2025.
2vulnerabilities
1critical
1high
0exploited
9.3average CVSS score
Latest Terminalfour vulnerabilities
- 9.8 Critical severity
Terminalfour: Improper Authorization
In Terminalfour 8 through 8.4.1.1, the userLevel parameter in the user management function is not subject to proper server-side authorization checks. A Power User can intercept and modify this parameter to assign the Administrator role to other existing lower-
- 8.8 High severity
xml_jdbc: Improper Restriction of XML External Entity Reference
XML External Entity (XXE) vulnerability in Terminalfour 8.0.0001 through 8.3.18 and XML JDBC versions up to 1.0.4 allows authenticated users to submit malicious XML via unspecified features which could lead to various actions such as accessing the underlying s