Priority
23 CVEs across 8 Priority products. Browse Priority vulnerabilities, severities, and proof-of-concept exploits.
Priority products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-59507 | Critical | 9.3 | 2026-08-13 | : Use of Hard-coded Credentials : Exposure of Sensitive Information to an Unauthorized Actor : Improper Access Control vulnerability in Priority Portal Generat… |
CVE-2026-59506 | Critical | 9.3 | 2026-08-13 | : Missing Authentication for Critical Function vulnerability in Priority Portal Generator addon to Priority ERP (developed by Soft Solutions). This issue affe… |
CVE-2026-59505 | High | 8.6 | 2026-08-13 | : Improper Access Control vulnerability in Priority Portal Generator addon to Priority ERP (developed by Soft Solutions). This issue affects Portal Generator… |
CVE-2026-59504 | Critical | 9.1 | 2026-08-13 | : Client-Side Enforcement of Server-Side Security vulnerability in Priority Portal Generator addon to Priority ERP (developed by Soft Solutions). This issue a… |
CVE-2026-59503 | Critical | 9.1 | 2026-08-13 | : Exposure of Sensitive Information to an Unauthorized Actor : Exposure of Private Personal Information to an Unauthorized Actor vulnerability in Priority Port… |
CVE-2026-59502 | Medium | 5.3 | 2026-08-13 | : Observable Discrepancy vulnerability in Priority Portal Generator addon to Priority ERP (developed by Soft Solutions). This issue affects Portal Generator a… |
CVE-2026-59501 | High | 8.2 | 2026-08-13 | : Improper Access Control vulnerability in Priority Portal Generator addon to Priority ERP (developed by Soft Solutions). This issue affects Portal Generator… |
CVE-2026-59500 | Critical | 10.0 | 2026-08-13 | : Improper Authentication vulnerability in Priority Portal Generator addon to Priority ERP (developed by Soft Solutions). This issue affects Portal Generator… |
CVE-2026-59499 | High | 8.6 | 2026-08-13 | : Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Priority Portal Generator addon to Priority ERP (developed by Soft Solutions).. … |
CVE-2025-55064 | Medium | 4.8 | 2025-12-29 | CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') |
CVE-2025-55063 | Medium | 4.8 | 2025-12-29 | CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') |
CVE-2025-55062 | Medium | 4.8 | 2025-12-29 | CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') |
CVE-2025-55061 | High | 8.8 | 2025-12-29 | CWE-434 Unrestricted Upload of File with Dangerous Type |
CVE-2025-55060 | Medium | 6.1 | 2025-12-29 | CWE-601 URL Redirection to Untrusted Site ('Open Redirect') |
CVE-2024-47922 | High | 7.5 | 2024-12-30 | Priority – CWE-200: Exposure of Sensitive Information to an Unauthorized Actor |
CVE-2024-41699 | Medium | 4.4 | 2024-08-20 | Priority – CWE-552: Files or Directories Accessible to External Parties |
CVE-2024-41698 | Medium | 4.3 | 2024-08-20 | Priority – CWE-200: Exposure of Sensitive Information to an Unauthorized Actor |
CVE-2024-41697 | Medium | 6.1 | 2024-08-20 | Priority - CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) |
CVE-2024-41696 | High | 7.5 | 2024-07-30 | Priority PRI WEB Portal Add-On for Priority ERP on prem - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor |
CVE-2023-23460 | Critical | 9.1 | 2023-02-15 | Priority Web version 19.1.0.68, parameter manipulation on an unspecified end-point may allow authentication bypass. |
CVE-2023-23459 | Critical | 9.1 | 2023-02-15 | Priority Windows may allow Command Execution via SQL Injection using an unspecified method. |
CVE-2022-23173 | Medium | 5.5 | 2022-07-06 | this vulnerability affect user that even not allowed to access via the web interface. First of all, the attacker needs to access the "Login menu - demo site" t… |
CVE-2022-23172 | Medium | 5.5 | 2022-07-06 | An attacker can access to "Forgot my password" button, as soon as he puts users is valid in the system, the system would issue a message that a password reset… |