5.3
Medium
CVE-2025-64277 Missing Authorization vulnerability in QuantumCloud ChatBot chatbot allows Exploiting Incorrectly Configured Access…
Description
Missing Authorization vulnerability in QuantumCloud ChatBot chatbot allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ChatBot: from n/a through <= 7.3.9.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| ChatBot 7.3 | earliest → 7.3.9 | No fix stated |
Other CVEs of ChatBot
The 8 CVEs of ChatBot →
CVE-2026-57363
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in QuantumCloud…
7.1
High
CVE-2026-57362
Unauthenticated Cross Site Scripting (XSS) in ChatBot <= 8.3.2 versions
7.1
High
CVE-2026-40788
Subscriber Broken Access Control in ChatBot <= 7.9.7 versions
7.1
High
CVE-2026-32499
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in QuantumCloud…
9.3
Critical