CVE-2025-6575

CVE-2025-6575 is a reflected XSS in Dolusoft Omaspot caused by improper input neutralization during web page generation. Affected versions are prior to 12.09.2025. Attack vector is network with user interaction required for exploitation; impact is partial confidentiality and integrity concerns as...

CVE-2025-7743

The CVE-2025-7743 entry concerns Dolusoft Omaspot, with a root cause described as cleartext transmission of sensitive information leading to interception and potential privilege escalation. Public sources in the connected set repeatedly reference prior versions of Omaspot (pre-12.09.2025) as affe...

CVE-2025-7744

CVE-2025-7744 corresponds to an SQL Injection vulnerability in Dolusoft Omaspot. The issue affects Omaspot versions prior to 12.09.2025 and stems from improper neutralization of special elements in SQL commands. The CVSS 3.1 vector indicates a network-based, low-attack complexity, no privileges r...