i-doit i-doit

Name: i-doit i-doit
Brand: i-doit

productUS

cpe:2.3:a:i-doit:i-doit:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

by severity

3critical5high10medium0low

updated 2026-10-26

vulnerabilities (19)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2018-20159US	high7.2	9.89% (96th)	Exploit	no fix	2018-12-15	= 1.11.2
CVE-2019-6965US	medium6.1	2.52% (85th)	Exploit	no fix	2019-06-18	= 1.12
CVE-2023-37756US	critical9.8	1.45% (73rd)	Exploit	no fix	2023-09-14	≤ 25
CVE-2023-37755US	critical9.8OT high	1.43% (73rd)	Exploit	no fix	2023-09-14	≤ 25
CVE-2014-1597US	high7.5	1.36% (72nd)	Exploit	no fix	2014-02-27	9 versions
CVE-2023-37739US	medium6.5	1.33% (71st)	Exploit	no fix	2023-09-14	≤ 25
CVE-2023-34830US	medium5.4	0.65% (51st)	Exploit	no fix	2023-06-27	≤ 24
CVE-2023-46003US	medium5.4	0.62% (49th)	Exploit	no fix	2023-10-21	≤ 25
CVE-2014-1237US	medium4.3	1.73% (77th)	—	no fix	2014-02-11	5 versions
CVE-2020-13826US	high8.8	1.50% (74th)	—	no fix	2020-08-20	≤ 1.14.2
CVE-2019-1010248US	critical9.8	1.42% (73rd)	—	no fix	2019-07-18	≤ 1.12
CVE-2021-3151US	medium5.4	1.22% (69th)	—	1.16.0	2021-02-27	< 1.16.0
CVE-2013-1413US	medium4.3	1.16% (67th)	—	no fix	2014-02-11	3 versions
CVE-2014-2231US	medium4.3	0.93% (60th)	—	no fix	2014-02-27	8 versions
CVE-2020-13825US	medium6.1	0.81% (56th)	—	no fix	2020-08-20	≤ 1.14.2
CVE-2024-8749US	high7.5	0.44% (37th)	—	no fix	2024-09-12	= 28
CVE-2019-25582US	—	0.38% (30th)	—	no fix	2026-03-21	= 1.12
CVE-2019-25581US	high7.5	0.36% (28th)	—	no fix	2026-03-21	= 1.12
CVE-2024-8750US	medium6.1	0.24% (14th)	—	no fix	2024-09-12	= 28

The flaw types (CWEs) most of these CVEs share.

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')9 CVEs
CWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')4 CVEs
CWE-1236Improper Neutralization of Formula Elements in a CSV File1 CVEs
CWE-20Improper Input Validation1 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1 CVEs
CWE-434Unrestricted Upload of File with Dangerous Type1 CVEs
CWE-521Weak Password Requirements1 CVEs
CWE-798Use of Hard-coded Credentials1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.