VendorsKagilumicescrumall versions
Vulnerabilities

Kagilum Icescrum

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

2CVEs
CVE-2025-60785
A remote code execution (RCE) vulnerability in the Postgres Drivers component of iceScrum v7.54 Pro On-prem allows attackers to execute arbitrary code via a crafted HTML page.
Published 2025-11-03 · Analyzed
8.8EPSS 0.008
CVE-2025-60786
A Zip Slip vulnerability in the import a Project component of iceScrum v7.54 Pro On-prem allows attackers to execute arbitrary code via uploading a crafted Zip file.
Published 2025-12-15 · Analyzed
8.8EPSS 0.006