Galaxy Software Services Corporation
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| iota C.ai Conversational Platform | 2 | – | Nov 27, 2024 |
| Vitals ESP | 2 | – | Oct 20, 2025 |
Exploited and recent CVEs
- CVE-2025-31342 Galaxy Software Services Vitals ESP Forum Module - Unrestricted Upload of File with Dangerous Type 0.5%
- CVE-2024-52959 iota C.ai Conversational Platform - Improper Control of Generation of Code ('Code Injection') 0.6%
- CVE-2024-52958 iota C.ai Conversational Platform - Improper Verification of Cryptographic Signature 0.3%
- CVE-2022-46309 Galaxy Software Services Corporation. Vitals ESP - Arbitrary Path File Reading 1.3%