valtimo-platform vulnerabilities
6 published CVEs name valtimo-platform among the affected products.
- 6Published CVEs6 of them scored
- 3Last 12 monthspublished in the last year
- 3Critical2 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-44516
Valtimo: Sensitive data exposure through HTTP request/response logging in LoggingRestClientCustomizer
valtimo-platform · valtimo
High7.6 - CVE-2026-42555
Valtimo: SpEL injection via StandardEvaluationContext allows Remote Code Execution by admin users
valtimo-platform · valtimo
Critical9.1 - CVE-2026-34164
Valtimo: Sensitive data exposure through inbox message logging in InboxHandlingService
valtimo-platform · valtimo
Medium4.9 - CVE-2025-58059
Valtimo scripting engine can be used to gain access to sensitive data or resources
valtimo-platform · valtimo-backend-libraries
Critical9.1 - CVE-2025-48881
Valtimo backend libraries allows objects in the object-api to be accessed and modified by unauthorized users
valtimo-platform · valtimo-backend-libraries
High8.3 - CVE-2024-34706
@valtimo/components exposes access token to form.io
valtimo-platform · valtimo-frontend-libraries
Critical9.8