Advisories · Technology

Galaxy Software Services Vitals ESP.

Every CVE that names Galaxy Software Services Vitals ESP among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-4640 CVE record

CVSS 8.7 High

Galaxy Software Services｜Vitals ESP - Missing Authentication
- Galaxy Software Services Vitals ESP
- Authentication bypass
Not analysed yet 24 Mar 2026
CVE-2026-4639 CVE record

CVSS 8.7 High

Galaxy Software Services｜Vitals ESP - Incorrect Authorization
- Galaxy Software Services Vitals ESP
- Broken access control
Not analysed yet 24 Mar 2026
CVE-2025-14255 CVE record

CVSS 7.1 High

Galaxy Software Services｜Vitals ESP - SQL Injection
- Galaxy Software Services Vitals ESP
- SQL injection
Not analysed yet 8 Dec 2025
CVE-2025-14254 CVE record

CVSS 7.1 High

Galaxy Software Services｜Vitals ESP - SQL Injection
- Galaxy Software Services Vitals ESP
- SQL injection
Not analysed yet 8 Dec 2025
CVE-2025-14253 CVE record

CVSS 6.9 Medium

Galaxy Software Services｜Vitals ESP - Arbitrary File Read
- Galaxy Software Services Vitals ESP
- Path traversal
Not analysed yet 8 Dec 2025
CVE-2023-41357 CVE record

CVSS 8.8 High

Galaxy Software Services Vitals ESP - Arbitrary File Upload
- Galaxy Software Services Vitals ESP
- Unrestricted file upload
Not analysed yet 3 Nov 2023
CVE-2023-37291 CVE record

CVSS 8.6 High

Galaxy Software Services Vitals ESP - Use of Hard-coded Cryptographic Key
- Galaxy Software Services Vitals ESP
- Hard-coded credentials
Not analysed yet 21 Jul 2023