Logo Software Inc. vulnerabilities
Published CVEs affecting Logo Software Inc. products: 5 record(s), with severity, exploitation and fixes.
CVE-2025-0609
Medium · 4.7
CWE-79 Oct 6, 2025
XSS in Logo Software's Logo Cloud
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Logo Software Inc. Logo Cloud allows Cross-Site Scripting (XSS).
This issue affects Logo Cloud: before 1.18.
CVE-2025-0608
Medium · 5.5
CWE-601 Oct 6, 2025
Open Redirect in Logo Software's Logo Cloud
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Logo Software Inc. Logo Cloud allows Phishing, Forceful Browsing.
This issue affects Logo Cloud: before 2025.R6.
CVE-2025-0607
Medium · 4.3
CWE-116 Oct 6, 2025
HTML Injection in Logo Software's Logo Cloud
Improper Encoding or Escaping of Output vulnerability in Logo Software Inc. Logo Cloud allows Phishing.
This issue affects Logo Cloud: before 2.57.
CVE-2025-0606
Medium · 6.0
CWE-639 Oct 6, 2025
IDOR in Logo Software's Logo Cloud
Authorization Bypass Through User-Controlled Key vulnerability in Logo Software Inc. Logo Cloud allows Forceful Browsing, Resource Leak Exposure.
This issue affects Logo Cloud: before 0.67.
CVE-2025-10609
Medium · 5.9
CWE-798 Oct 3, 2025
Hardcoded Credentials in Logo Software's TigerWings ERP
Use of Hard-coded Credentials vulnerability in Logo Software Inc. TigerWings ERP allows Read Sensitive Constants Within an Executable.
This issue affects TigerWings ERP: from 01.01.00 before 3.03.00.