Kron Technologies vulnerabilities and threats

2 threats

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.1	EPSS 0.4%	CVE-2025-5254Kron PAM · XSS or 'Cross-site Scripting' Medium6.1EPSS 0.4%2025-07-25CVE Database V5CVE-2025-5254 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Kron Technologies Kron PAM allows Stored XSS. This issue affects Kron PAM: before 3.7. EPSS 0.4%Vulnerability Kron Technologies CWE-79	CVE Database V5	2025-07-25
Medium	6.5	EPSS 0.5%	CVE-2025-5253Kron PAM · Unthrottled Resource Allocation Medium6.5EPSS 0.5%2025-07-25CVE Database V5CVE-2025-5253 Allocation of Resources Without Limits or Throttling vulnerability in Kron Technologies Kron PAM allows HTTP DoS. This issue affects Kron PAM: before 3.7. EPSS 0.5%Vulnerability Kron Technologies CWE-770	CVE Database V5	2025-07-25

Page 1 of 1