Priority-Software Priority
7 CVEs affecting Priority-Software Priority. Latest disclosed: 2024-08-20. Critical: 2, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-23460 | Critical | 9.1 | 2023-02-15 | Priority Web version 19.1.0.68, parameter manipulation on an unspecified end-point may allow authentication bypass. |
CVE-2023-23459 | Critical | 9.1 | 2023-02-15 | Priority Windows may allow Command Execution via SQL Injection using an unspecified method. |
CVE-2024-41697 | Medium | 6.1 | 2024-08-20 | Priority - CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) |
CVE-2022-23173 | Medium | 5.5 | 2022-07-06 | this vulnerability affect user that even not allowed to access via the web interface. First of all, the attacker needs to access the "Login menu - demo site" t… |
CVE-2022-23172 | Medium | 5.5 | 2022-07-06 | An attacker can access to "Forgot my password" button, as soon as he puts users is valid in the system, the system would issue a message that a password reset… |
CVE-2024-41699 | Medium | 4.4 | 2024-08-20 | Priority – CWE-552: Files or Directories Accessible to External Parties |
CVE-2024-41698 | Medium | 4.3 | 2024-08-20 | Priority – CWE-200: Exposure of Sensitive Information to an Unauthorized Actor |