VertiGIS Ltd. has 3 CVEs on record. 3 were published in the last 90 days. The busiest recent month was October 2026 with 3. The median CVSS is 5.1 (medium). The most common weakness class is CWE-79 (3). Most affected products: WebOrderSystem (KundenManager) (2), WebOrderSystem (AuftragsManager) (1).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 5.1
- Publish → KEV
- —
- Last 90 days
- 3 prev 0
Weakness classes
Products
- WebOrderSystem (KundenManager) 2
- WebOrderSystem (AuftragsManager) 1
Worst active — by depth score
CVE-2026-4952Medium· 5.1Stored Cross-Site Scripting in OrderAdministration Portal (AuftragsManager) via Business Reference in VertiGIS WebOrderSystem28CVE-2026-4951Medium· 5.1Reflected Cross-Site Scripting in CustomerAdministration Portal (KundenManager)in VertiGIS WebOrderSystem28CVE-2026-4950Medium· 4.8Stored Cross-Site Scripting in CustomerAdministration Portal (KundenManager) in VertiGIS WebOrderSystem26
VertiGIS Ltd. vulnerabilities
CVEs affecting VertiGIS Ltd., newest first. Open any entry for full detail, references, and exploit status.
3 CVEsRSS
CVE-2026-4952Medium· 5.1Stored Cross-Site Scripting in OrderAdministration Portal (AuftragsManager) via Business Reference in VertiGIS WebOrderSystem
The "ASMobile" web interface, which is part of the VertiGIS software package "GIS Portal", allows authenticated users to define a business reference. JavaScript code can be inserted into this field. On its own this only affects the user …
CVE-2026-4951Medium· 5.1Reflected Cross-Site Scripting in CustomerAdministration Portal (KundenManager)in VertiGIS WebOrderSystem
The CustomerAdministration portal (KundenManager) of VertiGIS WebOrderSystem allows privileged users to search for employees across all defined companies (user groups). The search term can be passed in the "searchValue" URL parameter, so…
CVE-2026-4950Medium· 4.8Stored Cross-Site Scripting in CustomerAdministration Portal (KundenManager) in VertiGIS WebOrderSystem
The CustomerAdministration portal (KundenManager) of VertiGIS WebOrderSystem allows privileged users to manage the employees of defined companies (user groups). User properties, for example the "secondName" parameter, can be filled with …