T-Systems Buroweb vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting T-Systems Buroweb: 2 record(s), with affected versions and fixes.
CVE-2026-7185
Medium · 6.0
CWE-22 Jul 6, 2026
Unauthorized access to files in T-Systems products
A validation vulnerability has been identified in certain web features related to file management or upload in several products of the TAO 2.0 suite. This vulnerability could allow an attacker capable of interacting with the affected feature to attempt to access file system resources outside the scope intended by the application.
CVE-2026-1432
Critical · 9.3
CWE-89 Feb 3, 2026
Buroweb Platform SQL Injection in tablon Component
SQL injection vulnerability in the Buroweb platform version 2505.0.12, specifically in the 'tablon' component. This vulnerability is present in several parameters that do not correctly sanitize user input in the endpoint '/sta/CarpetaPublic/doEvent?APP_CODE=STA&PAGE_CODE=TABLON'. Exploiting this vulnerability could allow an attacker to execute queries on the database and gain access to confidential information.