CVE-2025-61258
Published Dec 9, 2025Outsystems Platform Server 11.18.1.37828 allows attackers to cause a denial of service via a crafted content-length value mismatching the body length. NOTE: the Supplier indicates…
Vendor archive
outsystems CVEs
Beta · best-effort6 CVEs tagged to vendor outsystems — 0 Critical, 4 High, 2 Medium, 0 Low, 0 Unrated.
CVE-2022-47636
Published Aug 10, 2023A DLL hijacking vulnerability has been discovered in OutSystems Service Studio 11 11.53.30 build 61739. When a user open a .oml file (OutSystems Modeling Language), the applicatio…
CVE-2020-13639
Published Aug 31, 2021A stored XSS vulnerability was discovered in the ECT Provider in OutSystems before 2020-09-04, affecting generated applications. It could allow an unauthenticated remote attacker…
CVE-2021-29357
Published Apr 12, 2021The ECT Provider component in OutSystems Platform Server 10 before 10.0.1104.0 and 11 before 11.9.0 (and LifeTime management console before 11.7.0) allows SSRF for arbitrary outbo…
CVE-2020-29441
Published Nov 30, 2020An issue was discovered in the Upload Widget in OutSystems Platform 10 before 10.0.1019.0. An unauthenticated attacker can upload arbitrary files. In some cases, this attack may c…
CVE-2019-12273
Published Dec 31, 2019OutSystems Platform 10 through 11 allows ImageResourceDetail.aspx CSRF for content modifications and file uploads. NOTE: The product is self-hosted by the customer, even though it…
Showing 1-6 of 6 CVEsPage 1 of 1