Known Vulnerabilities for products from Eramba

Listed below are 10 of the newest known vulnerabilities associated with the vendor "Eramba".

These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.

Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.

Known Vulnerabilities

CVE Shortened Description Severity Publish Date Last Modified
CVE-2025-55462 json A CORS misconfiguration in Eramba Community and Enterprise Editions v3.26.0 allows an attacker-controlled Origin header to be... Not Provided 2026-01-13 2026-07-05
CVE-2023-36255 json An issue in Eramba Limited Eramba Enterprise and Community edition v.3.19.1 allows a remote attacker to execute arbitrary cod... Not Provided 2023-08-03 2026-07-09
CVE-2022-43342 json A stored cross-site scripting (XSS) vulnerability in the Add function of Eramba GRC Software c2.8.1 allows attackers to execu... 5.4 - MEDIUM 2022-11-14 2022-11-16
CVE-2020-28031 json eramba through c2.8.1 allows HTTP Host header injection with (for example) resultant wkhtml2pdf PDF printing by authenticated... 4.3 - MEDIUM 2020-11-02 2021-07-21
CVE-2020-25105 json eramba c2.8.1 and Enterprise before e2.19.3 has a weak password recovery token (createHash has only a million possibilities). 9.8 - CRITICAL 2020-09-03 2020-09-10
CVE-2020-25104 json eramba c2.8.1 and Enterprise before e2.19.3 allows XSS via a crafted filename for a file attached to an object. For example, ... 5.4 - MEDIUM 2020-09-03 2020-09-10
CVE-2018-7997 json Eramba e1.0.6.033 has Reflected XSS on the Error page of the CSV file inclusion tab of the /importTool/preview URI, with a CS... 6.1 - MEDIUM 2018-03-09 2018-03-27
CVE-2018-7996 json Eramba e1.0.6.033 has Stored XSS on the tooltip box via the /programScopes description parameter. 6.1 - MEDIUM 2018-03-09 2018-03-27
CVE-2018-7894 json Eramba e1.0.6.033 has Reflected XSS in reviews/filterIndex/ThirdPartyRiskReview via the advanced_filter parameter (aka the Se... 6.1 - MEDIUM 2018-03-09 2018-03-27
CVE-2018-7741 json Eramba e1.0.6.033 has Reflected XSS in the Date Filter via the created parameter to the /crons URI. 6.1 - MEDIUM 2018-03-07 2018-03-27

Known software with vulnerabilities from Eramba

Type Vendor Product Version
ApplicationErambaEramba2.19.3

© CVE.report 2026

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

Free CVE JSON API cve.report/api

CVE.report and Source URL Uptime Status status.cve.report