CVE Intelligence

Arangodb ArangoDB Community Edition vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Arangodb ArangoDB Community Edition: 1 record(s), with affected versions and fixes.

CVE-2019-25367 Medium · 5.4 CWE-79 Feb 15, 2026
ArangoDB Community Edition 3.4.2-1 XSS via aardvark admin interface
ArangoDB Community Edition 3.4.2-1 contains multiple cross-site scripting vulnerabilities in the Aardvark web admin interface (index.html) through search, user management, and API parameters. Attackers can inject scripts via parameters in /_db/_system/_admin/aardvark/index.html to execute JavaScript in authenticated users' browsers.