CVE-2026-15552

MediumCVSS 6.1

Published: 13/07/2026(UTC)Updated: 14/07/2026(UTC)Translated: 16/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.21%

11th percentile - higher than 11% of all known CVEs

Summary

A Stored Cross-Site Scripting vulnerability exists in Ragic's Enterprise Cloud Database. Unauthenticated remote attackers can inject persistent JavaScript code that executes in users' browsers upon page load.

Risk Assessment

Attackers can steal user sessions, modify content, or exfiltrate sensitive data without authentication. All users visiting the affected page are at risk.

Recommendation

Immediately update Enterprise Cloud Database to the latest patched version. Additionally, implement input validation and output encoding for all user-supplied data.

Other vulnerabilities in Enterprise Cloud Database

CVE-2026-15553Medium
An Arbitrary File Upload vulnerability in Ragic's Enterprise Cloud Database allows unauthenticated remote attackers to upload malicious files, which are then made available for users to download.

Original NVD description (English source)

Enterprise Cloud Database developed by Ragic has a Stored Cross-Site Scripting vulnerability, allowing unauthenticated remote attackers to inject persistent JavaScript code executed in users' browsers upon page load.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS