priority-software kayıtları
priority-software üreticisine ait 10 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-80 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)2
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor2
- CWE-552 Files or Directories Accessible to External Parties1
- CWE-639 Authorization Bypass Through User-Controlled Key1
- CWE-640 Weak Password Recovery Mechanism for Forgotten Password1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
10 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2023-23459İstismar yok | Priority Windows – Command Execution via SQL Injectionpriority-software · priority · CWE-89 | Kritik9,8 | — | %0,9 | 15 Şub 2023 |
39İzleyin | CVE-2023-23460İstismar yok | Priority Web – Authentication bypasspriority-software · priority · CWE-287 | Kritik9,8 | — | %0,7 | 15 Şub 2023 |
30İzleyin | CVE-2024-41696İstismar yok | Priority PRI WEB Portal Add-On for Priority ERP on prem – CWE-200: Exposure of Sensitive Information to an Unauthorized Actorpriority · pri web portal add-on for priority erp on prem · CWE-200 | Yüksek7,5 | — | %0,4 | 30 Tem 2024 |
30İzleyin | CVE-2024-41699İstismar yok | Priority – CWE-552: Files or Directories Accessible to External Partiespriority-software · priority · CWE-552 | Yüksek7,5 | — | %0,3 | 20 Ağu 2024 |
30İzleyin | CVE-2024-41698İstismar yok | Priority – CWE-200: Exposure of Sensitive Information to an Unauthorized Actorpriority-software · priority · CWE-200 | Yüksek7,5 | — | %0,3 | 20 Ağu 2024 |
25İzleyin | CVE-2022-23173İstismar yok | Priority - Priority web Insecure direct object references (IDOR)priority-software · priority · CWE-639 | Orta6,3 | — | %0,6 | 6 Tem 2022 |
24İzleyin | CVE-2021-26832Kavram kanıtı | Cross Site Scripting (XSS) in the "Reset Password" page form of Priority Enterprise Management System v8.00 allows attackers to execute javapriority-software · priority enterprise management system · CWE-79 | Orta6,1 | — | %0,8 | 14 Nis 2021 |
24İzleyin | CVE-2024-41697İstismar yok | Priority – CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)priority-software · priority · CWE-80 | Orta6,1 | — | %0,3 | 20 Ağu 2024 |
24İzleyin | CVE-2024-41693İstismar yok | Mashov - CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)priority-software · mashov · CWE-80 | Orta6,1 | — | %0,3 | 30 Tem 2024 |
17İzleyin | CVE-2022-23172İstismar yok | Priority - Priority User Enumerationpriority-software · priority · CWE-640 | Orta4,3 | — | %0,4 | 6 Tem 2022 |
- CVE-2023-2345939İzleyin
Priority Windows – Command Execution via SQL Injection
KritikCVSS 9,8İstismar yokEPSS %1priority-software · priority15 Şub 2023
- CVE-2023-2346039İzleyin
Priority Web – Authentication bypass
KritikCVSS 9,8İstismar yokEPSS %1priority-software · priority15 Şub 2023
- CVE-2024-4169630İzleyin
Priority PRI WEB Portal Add-On for Priority ERP on prem – CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
YüksekCVSS 7,5İstismar yokEPSS %0priority · pri web portal add-on for priority erp on prem30 Tem 2024
- CVE-2024-4169930İzleyin
Priority – CWE-552: Files or Directories Accessible to External Parties
YüksekCVSS 7,5İstismar yokEPSS %0priority-software · priority20 Ağu 2024
- CVE-2024-4169830İzleyin
Priority – CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
YüksekCVSS 7,5İstismar yokEPSS %0priority-software · priority20 Ağu 2024
- CVE-2022-2317325İzleyin
Priority - Priority web Insecure direct object references (IDOR)
OrtaCVSS 6,3İstismar yokEPSS %1priority-software · priority6 Tem 2022
- CVE-2021-2683224İzleyin
Cross Site Scripting (XSS) in the "Reset Password" page form of Priority Enterprise Management System v8.00 allows attackers to execute java
OrtaCVSS 6,1Kavram kanıtıEPSS %1priority-software · priority enterprise management system14 Nis 2021
- CVE-2024-4169724İzleyin
Priority – CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
OrtaCVSS 6,1İstismar yokEPSS %0priority-software · priority20 Ağu 2024
- CVE-2024-4169324İzleyin
Mashov - CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
OrtaCVSS 6,1İstismar yokEPSS %0priority-software · mashov30 Tem 2024
- CVE-2022-2317217İzleyin
Priority - Priority User Enumeration
OrtaCVSS 4,3İstismar yokEPSS %0priority-software · priority6 Tem 2022