VYPR
Vendor

Altitude

Products
4
CVEs
3
Across products
4
Status
Private

Products

4

Recent CVEs

3
  • CVE-2025-41082MedJan 26, 2026
    risk 0.45cvss epss 0.00

    Illegal HTTP request traffic vulnerability (CL.0) in Altitude Communication Server, caused by inconsistent analysis of multiple HTTP requests over a single Keep-Alive connection using Content-Length headers. This can cause a desynchronization of requests between frontend and…

  • CVE-2025-41083MedJan 26, 2026
    risk 0.33cvss epss 0.00

    Vulnerability in Altitude Authentication Service and Altitude Communication Server v8.5.3290.0 by Altitude, where manipulation of Host header in HTTP requests allows redirection to an arbitrary URL or modification of the base URL to trick the victim into sending login…

  • CVE-2014-9212Dec 5, 2014
    risk 0.00cvss epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in Altitude uAgent in Altitude uCI (Unified Customer Interaction) 7.5 allow remote attackers to inject arbitrary web script or HTML via (1) an email hyperlink or the (2) style parameter in the image attribute section.