fossbilling fossbilling

Name: fossbilling fossbilling
Brand: fossbilling

productUS

cpe:2.3:a:fossbilling:fossbilling:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

unpatched

by severity

2critical4high6medium0low

updated 2026-10-28

vulnerabilities (12)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2023-3393US	high7.2	1.03% (64th)	—	0.5.1	2023-06-23	< 0.5.1
CVE-2023-3490US	critical9.8	0.92% (60th)	—	0.5.3	2023-06-30	< 0.5.3
CVE-2023-3521US	medium6.1	0.92% (60th)	—	0.5.4	2023-07-06	< 0.5.4
CVE-2023-3491US	high8.8	0.89% (59th)	—	0.5.3	2023-06-30	< 0.5.3
CVE-2023-3493US	high8.0	0.53% (44th)	—	0.5.3	2023-06-30	< 0.5.3
CVE-2023-3229US	medium6.5	0.51% (43rd)	—	0.5.0	2023-06-14	< 0.5.0
CVE-2023-3394US	medium5.4	0.51% (43rd)	—	0.5.1	2023-06-23	< 0.5.1
CVE-2023-4005US	critical9.8	0.48% (41st)	—	0.5.5	2023-07-31	< 0.5.5
CVE-2023-3228US	medium5.7	0.48% (41st)	—	0.5.0	2023-06-14	< 0.5.0
CVE-2023-3568US	medium4.8	0.43% (37th)	—	0.5.4	2023-07-10	< 0.5.4
CVE-2023-3230US	high7.5OT elevated	0.41% (35th)	—	0.5.0	2023-06-14	< 0.5.0
CVE-2023-3227US	medium5.7	0.41% (35th)	—	0.5.0	2023-06-14	< 0.5.0

The flaw types (CWEs) most of these CVEs share.

CWE-840CWE-8402 CVEs
CWE-1220Insufficient Granularity of Access Control1 CVEs
CWE-1236Improper Neutralization of Formula Elements in a CSV File1 CVEs
CWE-384Session Fixation1 CVEs
CWE-434Unrestricted Upload of File with Dangerous Type1 CVEs
CWE-601URL Redirection to Untrusted Site ('Open Redirect')1 CVEs
CWE-613Insufficient Session Expiration1 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.