kivitendo
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| kivitendo | 1 | – | Nov 28, 2025 |
Exploited and recent CVEs
- CVE-2025-66370 Kivitendo before 3.9.2 allows XXE injection. By uploading an electronic invoice in the ZUGFeRD format, it is possible to read and exfiltrate files from the server's filesystem. 0.4%