Vulnerabilidades de OutSystems

🔔 Criar alerta RSS

CVEs publicadas que afetam produtos de OutSystems: 2 registro(s), com severidade, exploração e correções.

Platform Server 1 Lifetime 1

Somente exploradas (KEV) →

CVE-2026-40127 Média · 5.3 CWE-639 25/05/2026

Authorization Bypass Through User-Controlled Key in OutSystems Lifetime

OutSystems Lifetime is vulnerable to Authorization Bypass Through User-Controlled Key vulnerability in ApplicationID parameter. Any authenticated user, can read the Change Log containing actions performed by other users as well as application name of any application. This issue was fixed in OutSystems Lifetime version 11.28.2.3955

CVE-2025-61258 Alta · 7.5 CWE-444 09/12/2025

HTTP Request Smuggling em Outsystems Platform Server

Outsystems Platform Server 11.18.1.37828 allows attackers to cause a denial of service via a crafted content-length value mismatching the body length. NOTE: the Supplier indicates that they are unable to reproduce this.