CVE Program partner

TCS-CERT

TCS-CERT (Thales Cyber Solutions Customer’s CERT)

API
CVEs, 365 days1313 all time, 0 rejected
Quality97%median 99%
CVSS by the CNA100%share of records
CWE92%share of records
Affected versions100%not n/a or unspecified
CVSS added by CISA0%lower is better
OrganisationTCS-CERT (Thales Cyber Solutions Customer’s CERT)
RoleCNA
TypeCERT
Reports toTHA-PSIRT → mitre
ScopeVulnerabilities related to TCS-CERT’s customers’ environment and vulnerabilities related to research conducted by Cyber Solutions by Thales’ Intrusion and Application Security Team.
Advisorieshttps://cds.thalesgroup.com/en/tcs-cert/advisory

Latest CVEs · RSS

  • CVE-2026-18825 2026-09-28 · CVSS 5.3
    An Origin Validation Error in the middleware of the connect-xcors npm package allows an attacker to bypass origin verification and perform a cross domain authen
  • CVE-2026-19614 2026-09-08 · CVSS 5.3
    The API is prone to XML external entity (XXE) injection. By default, XML external entity support is enabled. This issue affects NanoXML: 2.2.3.
  • CVE-2026-9007 2026-07-15 · CVSS 5.5
    Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in HCL Notes from HCL Software allows reflected Cross-Site
  • CVE-2026-6501 2026-05-04 · CVSS 5.3
    Improper restriction of XML external entity reference vulnerability in ILM Informatique jOpenDocument allows Data Serialization External Entities Blowup. This
  • CVE-2026-6500 2026-05-04 · CVSS 4.8
    Plaintext storage of a password vulnerability in ILM Informatique OpenConcerto allows Retrieve Embedded Sensitive Data. This issue affects OpenConcerto: 1.7.5.
  • CVE-2026-6499 2026-05-04 · CVSS 2.4
    Incorrect Permission Assignment for Critical Resource vulnerability in ILM Informatique OpenConcerto allows Replace Binaries. This issue affects OpenConcerto:
  • CVE-2026-2344 2026-02-11 · CVSS 8.6
    A vulnerability in Plunet Plunet BusinessManager allows unauthorized actions being performed on behalf of privileged users.This issue affects Plunet BusinessMan
  • CVE-2026-2337 2026-02-11 · CVSS 8.7
    A vulnerability in Plunet Plunet BusinessManager allows session hijacking, data theft, unauthorized actions on behalf of the user.This issue affects Plunet Busi
  • CVE-2025-15479 2026-01-07 · CVSS 5.1
    Stored cross-site scripting (XSS, CWE-79) in the survey content and administration functionality in Data Illusion Zumbrunn NGSurvey Enterprise Edition 3.6.4 on
  • CVE-2025-13873 2025-12-02 · CVSS 4.8
    Stored Cross-Site Scripting (XSS) in the survey-import feature of ObjectPlanet Opinio 7.26 rev12562 on web application allows an attacker to inject arbitrary Ja
  • CVE-2025-13872 2025-12-02 · CVSS 2.1
    Blind Server-Side Request Forgery (SSRF) in the survey-import feature of ObjectPlanet Opinio 7.26 rev12562 on Web-based platforms allows an attacker to for
  • CVE-2025-13871 2025-12-02 · CVSS 2.3
    Cross-Site Request Forgery (CSRF) in the resource-management feature of ObjectPlanet Opinio 7.26 rev12562 allows to upload files on behalf of the connected
  • CVE-2025-13829 2025-12-01 · CVSS 8.6
    Incorrect Authorization vulnerability in Data Illusion Zumbrunn NGSurvey allows any logged-in user to obtain the private information of any other user. Crit

All CVE Program partners