Tryton

    Dashboard / Vendors

    Products: 3
    Vulnerabilities: 18
    Known Exploited: 0
    0
    Critical Level Threats
    5
    High Level Threats
    13
    Medium Level Threats
    0
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2020-37014

    Tryton 5.4 - Persistent Cross-Site Scripting

    Last Modified: Apr 15, 2026
    Published: Jan 30, 2026

    CVE-2025-66422

    Tryton trytond before 7.6.11 allows remote attackers to obtain sensitive trace-back (server setup) information. This is fixed in 7.6.11, 7.4.21, 7.0.40, and 6.0.70.

    Last Modified: Dec 04, 2025
    Published: Nov 30, 2025

    CVE-2025-66424

    Tryton trytond 6.0 before 7.6.11 does not enforce access rights for data export. This is fixed in 7.6.11, 7.4.21, 7.0.40, and 6.0.70.

    Last Modified: Dec 04, 2025
    Published: Nov 30, 2025

    CVE-2025-66420

    Tryton sao (aka tryton-sao) before 7.6.9 allows XSS via an HTML attachment. This is fixed in 7.6.9, 7.4.19, 7.0.38, and 6.0.67.

    Last Modified: Apr 15, 2026
    Published: Nov 30, 2025

    CVE-2025-66421

    Tryton sao (aka tryton-sao) before 7.6.11 allows XSS because it does not escape completion values. This is fixed in 7.6.11, 7.4.21, 7.0.40, and 6.0.69.

    Last Modified: Apr 15, 2026
    Published: Nov 30, 2025
    Items Per Page