Hepta Platforms vulnerabilities
Published CVEs affecting Hepta Platforms products: 2 record(s), with severity, exploitation and fixes.
CVE-2026-78213
High · 8.7
CWE-79 Aug 24, 2026
Hepta Platforms｜Heptabase - Stored Cross-Site Scripting
Heptabase developed by Hepta Platforms, Inc. has a Stored Cross-Site Scripting vulnerability. Authenticated remote attackers can inject persistent malicious content into specific pages, causing arbitrary JavaScript code to execute when other users click the crafted content.
CVE-2026-12060
Medium · 6.5
CWE-749 Jun 12, 2026
Hepta Platforms｜Heptabase - Exposed Dangerous
Heptabase developed by Hepta Platforms has a Exposed Dangerous Method or Function vulnerability, allowing unauthenticated remote attackers to leverage social engineering techniques to trick a victim into opening or loading a malicious webpage within the Heptabase application, thereby gaining unauthorized access to camera and microphone permissions.