Cordaware
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| bestinformed Web | 3 | – | Feb 18, 2025 |
| bestinformed Infoclient | 1 | – | Feb 18, 2025 |
Exploited and recent CVEs
- CVE-2025-0425 Local Privilege Escalation via Config Manipulation 0.2%
- CVE-2025-0424 Multiple Authenticated Stored Cross-Site Scripting 0.4%
- CVE-2025-0423 Multiple Unauthenticated Stored Cross-Site Scripting 0.5%
- CVE-2025-0422 Authenticated Remote Code Execution via ScriptVar 0.9%