Most Exploited Internet-Facing Products

MEIFP

Back to Ranking

Trimble

Products: Cityworks · Cityworks (with office companion) · SPS851

24.0

Score

2

CVEs

1

Active

1

PoC

1

KEV

#112

Rank

Period:

Product:

CVE ID	Published	CVSS	Exploit	KEV	AC	PR	Auto	Score(hover)	Affected Products	Description
CVE-2025-0994	2025-02-06	8.6v4.0	ACTIVE		Low	High	no	24.0	CityworksCityworks (with office companion)	Trimble Cityworks versions prior to 15.8.9 and Cityworks with office companion versions prior to 23.10 are vulnerable to a deserialization vulnerability. This could allow an authenticated user to perform a remote code execution attack against a customer’s Microsoft Internet Information Services (IIS
CVE-2025-0219	2025-01-05	5.1v4.0	POC	—	Low	High	no	0.0	SPS851	A vulnerability, which was classified as problematic, has been found in Trimble SPS851 488.01. Affected by this issue is some unknown functionality of the component Receiver Status Identity Tab. The manipulation of the argument System Name leads to cross site scripting. The attack may be launched re

Each CVE: 10 pts base (Active only), boosted by:

KEV×2.0AC: Low×1.2PR: None×1.3PR: Low×1.1Auto×1.3