📦 Trufusion Enterprise

by Rocketsoftware

🔍 What is Trufusion Enterprise?

Description coming soon...

🛡️ Security Overview

Click on a severity to filter vulnerabilities

⚠️ Known Vulnerabilities

CVE-2025-27224

CRITICAL CVSS 9.8 Oct 27, 2025

This vulnerability allows unauthenticated attackers to upload malicious files to arbitrary locations on TRUfusion Enterprise servers via path traversal in the /trufusionPortal/fileupload endpoint. Thi...

CVE-2025-27222

HIGH CVSS 8.6 Oct 27, 2025

CVE-2025-27222 is a path traversal vulnerability in TRUfusion Enterprise's /trufusionPortal/getCobrandingData endpoint that allows attackers to read arbitrary files on the server. This can expose sens...