Products: 1
Vulnerabilities: 6
Known Exploited: 0
0
Critical Level Threats
3
High Level Threats
3
Medium Level Threats
0
Low Level Threats
Vulnerabilities
100806040200
JanFebMarAprMayJunJulAugSepOctNovDec
Critical Level Threats
High Level Threats
Medium Level Threats
Low Level Threats
Products Security index
Actions
Items Per Page
Vulnerabilities
CVE-2026-97735
SVG Attachment Vulnerability in ITFlow Ticket Email Parser
Last Modified: Sep 25, 2026
Published: Sep 25, 2026
CVE-2026-54597
ITFlow: Authenticated Time-Based Blind SQL Injection in ITFlow via expires Parameter
Last Modified: Sep 19, 2026
Published: Sep 17, 2026
CVE-2026-54596
ITFlow: Authenticated SQL Injection via recurring_invoice_frequency Parameter Enables Full Database Exfiltration
Last Modified: Sep 24, 2026
Published: Sep 17, 2026
CVE-2026-47755
ITFlow Vulnerable to Authenticated Cross-Tenant Credential Disclosure via Unprotected Credential Modal
Last Modified: Jul 30, 2026
Published: Jul 23, 2026
CVE-2025-67081
An SQL injection vulnerability in Itflow through 25.06 has been identified in the "role_id" parameter when editing a profile. An attacker with admin account can exploit this issue via blind SQL injection, allowing for the extraction of arbitrary data from the database. The vulnerability arises from insufficient sanitizing on integer parameter.
Last Modified: Jan 23, 2026
Published: Jan 15, 2026
Items Per Page
