Priority-Software

9 CVEs across 3 Priority-Software products. Browse Priority-Software vulnerabilities, severities, and proof-of-concept exploits.

Priority-Software products with known CVEs

ProductCVEs
Priority7
Mashov1
Priority Enterprise Management System1
Priority-Software CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2024-41699Medium4.42024-08-20Priority – CWE-552: Files or Directories Accessible to External Parties
CVE-2024-41698Medium4.32024-08-20Priority – CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
CVE-2024-41697Medium6.12024-08-20Priority - CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
CVE-2024-41693Medium6.12024-07-30Mashov - CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
CVE-2023-23460Critical9.12023-02-15Priority Web version 19.1.0.68, parameter manipulation on an unspecified end-point may allow authentication bypass.
CVE-2023-23459Critical9.12023-02-15Priority Windows may allow Command Execution via SQL Injection using an unspecified method.
CVE-2022-23173Medium5.52022-07-06this vulnerability affect user that even not allowed to access via the web interface. First of all, the attacker needs to access the "Login menu - demo site" t…
CVE-2022-23172Medium5.52022-07-06An attacker can access to "Forgot my password" button, as soon as he puts users is valid in the system, the system would issue a message that a password reset…
CVE-2021-26832Medium6.12021-04-14Cross Site Scripting (XSS) in the "Reset Password" page form of Priority Enterprise Management System v8.00 allows attackers to execute javascript on behalf of…