Vulnerabilidades de Leica Geosystems AG

🔔 Criar alerta RSS

CVEs publicadas que afetam produtos de Leica Geosystems AG: 2 registro(s), com severidade, exploração e correções.

GR10/GR25/GR30/GR50 GNSS 2

Somente exploradas (KEV) →

CVE-2019-25259 Média · 5.3 CWE-352 07/01/2026

Leica Geosystems GR10/GR25/GR30/GR50 GNSS 4.30.063 Cross-Site Request Forgery

Leica Geosystems GR10/GR25/GR30/GR50 GNSS 4.30.063 contains a cross-site request forgery vulnerability that allows attackers to perform administrative actions without request validation. Attackers can trick logged-in users into executing unauthorized actions by crafting malicious web pages that submit requests to the application.

CVE-2018-25131 Alta · 7.2 CWE-79 24/12/2025

Leica Geosystems GR10/GR25/GR30/GR50 GNSS 4.30.063 Stored XSS via Config Upload

Leica Geosystems GR10/GR25/GR30/GR50 GNSS 4.30.063 contains a stored cross-site scripting vulnerability in the configuration file upload functionality. Attackers can upload a malicious HTML file to that executes arbitrary JavaScript in a user's browser session when viewed.