Anviz Biometric Technology Co., Ltd. vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Anviz Biometric Technology Co., Ltd. products: 1 record(s), with severity, exploitation and fixes.

Anviz AIM CrossChex Standard 1

Exploited only (KEV) →

CVE-2018-25135 Critical · 9.8 CWE-149 Dec 24, 2025

Anviz AIM CrossChex Standard 4.3.6.0 CSV Injection via User Import

Anviz AIM CrossChex Standard 4.3.6.0 contains a CSV injection vulnerability that allows attackers to execute commands by inserting malicious formulas in user import fields. Attackers can craft payloads in fields like 'Name', 'Gender', or 'Position' to trigger Excel macro execution when importing user data.