priority-software records

10 published records for vendor priority-software.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 1
With a fix record: 0%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

10 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
39Monitor	CVE-2023-23459No exploit	Priority Windows – Command Execution via SQL Injectionpriority-software · priority · CWE-89 pre-auth RCE SQL injection	Critical9.8	—	0.9%	Feb 15, 2023
39Monitor	CVE-2023-23460No exploit	Priority Web – Authentication bypasspriority-software · priority · CWE-287 Pre-auth Auth bypass	Critical9.8	—	0.7%	Feb 15, 2023
30Monitor	CVE-2024-41696No exploit	Priority PRI WEB Portal Add-On for Priority ERP on prem – CWE-200: Exposure of Sensitive Information to an Unauthorized Actorpriority · pri web portal add-on for priority erp on prem · CWE-200 Pre-auth Info leak	High7.5	—	0.4%	Jul 30, 2024
30Monitor	CVE-2024-41699No exploit	Priority – CWE-552: Files or Directories Accessible to External Partiespriority-software · priority · CWE-552 Pre-auth	High7.5	—	0.3%	Aug 20, 2024
30Monitor	CVE-2024-41698No exploit	Priority – CWE-200: Exposure of Sensitive Information to an Unauthorized Actorpriority-software · priority · CWE-200 Pre-auth Info leak	High7.5	—	0.3%	Aug 20, 2024
25Monitor	CVE-2022-23173No exploit	Priority - Priority web Insecure direct object references (IDOR)priority-software · priority · CWE-639 Broken access control (IDOR)	Medium6.3	—	0.6%	Jul 6, 2022
24Monitor	CVE-2021-26832Proof of concept	Cross Site Scripting (XSS) in the "Reset Password" page form of Priority Enterprise Management System v8.00 allows attackers to execute javapriority-software · priority enterprise management system · CWE-79 Pre-auth XSS	Medium6.1	—	0.8%	Apr 14, 2021
24Monitor	CVE-2024-41697No exploit	Priority – CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)priority-software · priority · CWE-80 Pre-auth XSS	Medium6.1	—	0.3%	Aug 20, 2024
24Monitor	CVE-2024-41693No exploit	Mashov - CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)priority-software · mashov · CWE-80 Pre-auth XSS	Medium6.1	—	0.3%	Jul 30, 2024
17Monitor	CVE-2022-23172No exploit	Priority - Priority User Enumerationpriority-software · priority · CWE-640	Medium4.3	—	0.4%	Jul 6, 2022

CVE-2023-23459
39Monitor
Priority Windows – Command Execution via SQL Injection
CriticalCVSS 9.8No exploitEPSS 1%
- pre-auth RCE
- SQL injection
priority-software · priorityFeb 15, 2023
CVE-2023-23460
39Monitor
Priority Web – Authentication bypass
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- Auth bypass
priority-software · priorityFeb 15, 2023
CVE-2024-41696
30Monitor
Priority PRI WEB Portal Add-On for Priority ERP on prem – CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Info leak
priority · pri web portal add-on for priority erp on premJul 30, 2024
CVE-2024-41699
30Monitor
Priority – CWE-552: Files or Directories Accessible to External Parties
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
priority-software · priorityAug 20, 2024
CVE-2024-41698
30Monitor
Priority – CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Info leak
priority-software · priorityAug 20, 2024
CVE-2022-23173
25Monitor
Priority - Priority web Insecure direct object references (IDOR)
MediumCVSS 6.3No exploitEPSS 1%
- Broken access control (IDOR)
priority-software · priorityJul 6, 2022
CVE-2021-26832
24Monitor
Cross Site Scripting (XSS) in the "Reset Password" page form of Priority Enterprise Management System v8.00 allows attackers to execute java
MediumCVSS 6.1Proof of conceptEPSS 1%
- Pre-auth
- XSS
priority-software · priority enterprise management systemApr 14, 2021
CVE-2024-41697
24Monitor
Priority – CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
MediumCVSS 6.1No exploitEPSS 0%
- Pre-auth
- XSS
priority-software · priorityAug 20, 2024
CVE-2024-41693
24Monitor
Mashov - CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
MediumCVSS 6.1No exploitEPSS 0%
- Pre-auth
- XSS
priority-software · mashovJul 30, 2024
CVE-2022-23172
17Monitor
Priority - Priority User Enumeration
MediumCVSS 4.3No exploitEPSS 0%
priority-software · priorityJul 6, 2022