Advisories · Technology
Altium 365.
Every CVE that names Altium 365 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.2 High
Incorrect Authorization in Altium 365 Git Service Allows Unauthorized Repository Writes
- Altium 365
- Broken access control
- CWE-20
- CVSS 9.4 CriticalCritical · CVSS 9+
Path Traversal in Altium Git Service Allows Remote Code Execution
- Altium Enterprise Server
- Altium 365
- Path traversal
- Code injection
- CVSS 8.3 High
Path Traversal in Altium Projects Service Allows Arbitrary File Read
- Altium Enterprise Server
- Altium 365
- Path traversal
- Information disclosure
- CVSS 10.0 CriticalCritical · CVSS 9+
Path Traversal in Altium Vault ScriptsController Allows Unauthenticated Remote Code Execution
- Altium Enterprise Server
- Altium 365
- Path traversal
- Authentication bypass
- CVSS 8.3 High
Server-Side Request Forgery in Altium Platform Design GraphQL Service Allows Information Disclosure
- Altium Enterprise Server
- Altium 365
- Information disclosure
- Server-side request forgery (SSRF)
- CVSS 10.0 CriticalCritical · CVSS 9+
Unauthenticated SOAP Endpoint in Altium 365 SearchService Allows Cross-Tenant Data Exfiltration and Index Destruction
- Altium 365
- Authentication bypass
- Broken access control
- CVSS 9.0 CriticalCritical · CVSS 9+
Altium 365 Over-Permissive CORS Configuration Allows Credentialed Cross-Origin Workspace Access
- Altium 365
- Broken access control
- CWE-942