Skip to content

Vendor

pmweb vulnerabilities

3 published CVES affecting pmweb, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
3
Critical
0
High
0
Medium
3
Low
0
Unscored
0
CISA KEV
0
Atom feed of pmweb alerts

Products

Latest pmweb CVEs

Newest publication first

  1. CVE-2026-101083 PMWeb encryptionhelper.dll information disclosure

    Published
    MediumCVSS 6.9

    A security vulnerability has been detected in PMWeb v7.x/v8.x/v2025.x. Impacted is an unknown function in the library encryptionhelper.dll. Such manipulation leads to information disclosure. The attack may be launched remotely. The vendor was contacted early about this disclosure...

  2. CVE-2026-101082 PMWeb downloader.aspx path traversal

    Published
    MediumCVSS 6.9

    A weakness has been identified in PMWeb 7.x/8.x/2025.x. This issue affects some unknown processing of the file downloader.aspx. This manipulation of the argument FullFileName/FileName causes path traversal. The attack may be initiated remotely. The exploit has been made available...

  3. CVE-2024-7466 PMWeb Web Application Firewall cross site scripting

    Published
    MediumCVSS 5.1

    A vulnerability has been found in PMWeb 7.2.00 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component Web Application Firewall. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.