Adata Mitarbeiter Portal vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Adata Mitarbeiter Portal: 2 record(s), with affected versions and fixes.
cpe:2.3:a:adata:mitarbeiter_portal

CVE-2025-61075 High · 8.1 CWE-639 Dec 9, 2025

Multiple Incorrect Access Control vulnerabilities in adata Software GmbH Mitarbeiterportal 2.15.2...

Multiple Incorrect Access Control vulnerabilities in adata Software GmbH Mitarbeiterportal 2.15.2.0 allow remote authenticated, low-privileged users to carry out administrative functions and manipulate data of other users via unauthorized API calls.

CVE-2025-61074 Medium · 4.6 CWE-79 Dec 9, 2025

Cross-site Scripting (XSS) in Adata Mitarbeiter Portal

A stored Cross Site Scripting (XSS) vulnerability in the bulletin board (SchwarzeBrett) in adata Software GmbH Mitarbeiter Portal 2.15.2.0 allows remote authenticated users to execute arbitrary JavaScript code in the web browser of other users via manipulation of the 'Inhalt' parameter of the '/SchwarzeBrett/Nachrichten/CreateNachricht' or '/SchwarzeBrett/Nachrichten/EditNachricht/' requests.