webordersystem_auftragsmanager vulnerabilities

CVEs whose affected-version data names the webordersystem_auftragsmanager package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-4952Medium· 5.1

today

Stored Cross-Site Scripting in OrderAdministration Portal (AuftragsManager) via Business Reference in VertiGIS WebOrderSystem

The "ASMobile" web interface, which is part of the VertiGIS software package "GIS Portal", allows authenticated users to define a business reference. JavaScript code can be inserted into this field. On its own this only affects the user …

▾ SunlitVertiGIS Ltd. · WebOrderSystem (AuftragsManager)via CVEORG