CVE-2018-7997: Eramba

Medium severity, CVSS 6.1. EPSS: 0.6% chance of exploitation in the next 30 days.

Eramba e1.0.6.033 has Reflected XSS on the Error page of the CSV file inclusion tab of the /importTool/preview URI, with a CSV file polluted with malicious JavaScript.

Affected products

• Eramba Eramba: version e1.0.6.033 only

Published 2018-03-09. Last modified 2026-06-17.