Skip to content

Vendor

T-Systems vulnerabilities

3 published CVES affecting T-Systems, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
3
Critical
1
High
0
Medium
2
Low
0
Unscored
0
CISA KEV
0
Atom feed of T-Systems alerts

Products

Latest T-Systems CVEs

Newest publication first

  1. CVE-2026-92976 Stored Cross-Site Scripting (XSS) in T-Systems’ TAO 2.0

    Published
    MediumCVSS 5.1 EPSS 0.38%

    A stored Cross-Site Scripting (XSS) vulnerability in the profile management functionality of T-Systems’ TAO 2.0 suite. An authenticated user could inject malicious HTML or JavaScript content into the fields containing their personal data. The content entered is stored and display...

  2. CVE-2026-7185 Unauthorized access to files in T-Systems products

    Published
    MediumCVSS 6.0 EPSS 0.44%

    A validation vulnerability has been identified in certain web features related to file management or upload in several products of the TAO 2.0 suite. This vulnerability could allow an attacker capable of interacting with the affected feature to attempt to access file system resou...

  3. CVE-2026-1432 SQL injection (SQLi) on the Buroweb platform

    Published
    CriticalCVSS 9.3 EPSS 0.35%

    SQL injection vulnerability in the Buroweb platform version 2505.0.12, specifically in the 'tablon' component. This vulnerability is present in several parameters that do not correctly sanitize user input in the endpoint '/sta/CarpetaPublic/doEvent?APP_CODE=STA&PAGE_CODE=TABLON'....

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.