İçeriğe atla
Noroxi

unit4 kayıtları

unit4 üreticisine ait 11 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
1
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 17
  2. 21
  3. 22
  4. 24

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

11 kayıt
  • CVE-2015-1174
    40Planlayın

    Session fixation vulnerability in Unit4 Polska TETA Web (formerly TETA Galactica) 22.62.3.4 and earlier allows remote attackers to hijack we

    KritikCVSS 9,8İstismar yokEPSS %3

    unit4 · teta web2 Ağu 2017

  • CVE-2022-27434
    39İzleyin

    UNIT4 TETA Mobile Edition (ME) before 29.5.HF17 was discovered to contain a SQL injection vulnerability via the ProfileName parameter in the

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    unit4 · teta17 Tem 2022

  • CVE-2021-36231
    36İzleyin

    Deserialization of untrusted data in multiple functions in MIK.starlight 7.9.5.24363 allows authenticated remote attackers to execute operat

    YüksekCVSS 8,8İstismar yokEPSS %3

    unit4 · mik.starlight31 Ağu 2021

  • CVE-2021-36232
    35İzleyin

    Improper Authorization in multiple functions in MIK.starlight 7.9.5.24363 allows an authenticated attacker to escalate privileges.

    YüksekCVSS 8,8İstismar yokEPSS %1

    unit4 · mik.starlight31 Ağu 2021

  • CVE-2024-28735
    32İzleyin

    Unit4 Financials by Coda versions prior to 2023Q4 suffer from an incorrect access control authorization bypass vulnerability which allows an

    YüksekCVSS 8,1İstismar yokEPSS %1

    unit4 · financials by coda20 Mar 2024

  • CVE-2015-1173
    31İzleyin

    Unit4 Polska TETA Web (formerly TETA Galactica) 22.62.3.4 does not properly restrict access to the (1) Design Mode and (2) Debug Logger mode

    YüksekCVSS 7,5İstismar yokEPSS %2

    unit4 · teta web16 Eyl 2015

  • CVE-2021-36233
    26İzleyin

    The function AdminGetFirstFileContentByFilePath in MIK.starlight 7.9.5.24363 allows (by design) an authenticated attacker to read arbitrary

    OrtaCVSS 6,5İstismar yokEPSS %1

    unit4 · mik.starlight31 Ağu 2021

  • CVE-2022-34001
    26İzleyin

    Unit4 ERP through 7.9 allows XXE via ExecuteServerProcessAsynchronously.

    OrtaCVSS 6,5İstismar yokEPSS %1

    unit4 · enterprise resource planning19 Tem 2022

  • CVE-2024-28734
    25İzleyin

    Cross Site Scripting vulnerability in Unit4 Financials by Coda prior to 2023Q4 allows a remote attacker to run arbitrary code via a crafted

    OrtaCVSS 6,1Kavram kanıtıEPSS %2

    19 Mar 2024

  • CVE-2021-36234
    22İzleyin

    Use of a hard-coded cryptographic key in MIK.starlight 7.9.5.24363 allows local users to decrypt credentials via unspecified vectors.

    OrtaCVSS 5,5İstismar yokEPSS %0

    unit4 · mik.starlight31 Ağu 2021

  • CVE-2015-2082
    18İzleyin

    Cross-site scripting (XSS) vulnerability in Login.aspx in UNIT4 Prosoft HRMS before 8.14.330.43 allows remote attackers to inject arbitrary

    OrtaCVSS 4,3İstismar yokEPSS %2

    unit4 · prosoft hrms25 Şub 2015