AS
Vendor
Ascertia
8
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2025-61166 | SI Signinghub Ascertia | 6.1 | Apr 6 | An open redirect in Ascertia SigningHub User v10.0 allows attackers to redirect users to a malicious site via a crafted URL |
| CVE-2025-54321 | SI Signinghub Ascertia | 9.8 | Nov 18 | In Ascertia SigningHub through 8.6.8, there is a lack of rate limiting on the reset password function, leading to an email bombing vulnerability |
| CVE-2025-54320 | SI Signinghub Ascertia | 4.3 | Nov 18 | In Ascertia SigningHub through 8.6.8, there is a lack of rate limiting on the invite user function, leading to an email bombing vulnerability |
| CVE-2025-56224 | SI Signinghub Ascertia | 8.1 | Oct 20 | A lack of rate limiting in the One-Time Password (OTP) verification endpoint of SigningHub v8.6.8 allows attackers to bypass verification via a bruteforce attack |
| CVE-2025-56219 | SI Signinghub Ascertia | 7.1 | Oct 20 | Incorrect access control in SigningHub v8.6.8 allows attackers to arbitrarily add user accounts without any rate limiting |
| CVE-2025-56223 | SI Signinghub Ascertia | 7.5 | Oct 20 | A lack of rate limiting in the component /Home/UploadStreamDocument of SigningHub v8.6.8 allows attackers to cause a Denial of Service (DoS) via uploading an excessive number of… |
| CVE-2025-56218 | SI Signinghub Ascertia | 9.8 | Oct 17 | An arbitrary file upload vulnerability in SigningHub v8.6.8 allows attackers to execute arbitrary code via uploading a crafted PDF file |
| CVE-2025-56221 | SI Signinghub Ascertia | 9.8 | Oct 17 | A lack of rate limiting in the login mechanism of SigningHub v8.6.8 allows attackers to bypass authentication via a brute force attack |