Transtek Mojodat Fixed Asset Management
4 CVEs affecting Transtek Mojodat Fixed Asset Management. Latest disclosed: 2022-09-13. Critical: 2, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-38771 | Critical | 9.8 | 2022-09-13 | The mobile application in Transtek Mojodat FAM (Fixed Asset Management) 2.4.6 allows remote attackers to send SCRIPT tags as injected input to the API request. |
CVE-2022-38768 | Critical | 9.8 | 2022-09-13 | The mobile application in Transtek Mojodat FAM (Fixed Asset Management) 2.4.6 allows remote attackers to bypass authorization. |
CVE-2022-38769 | High | 7.5 | 2022-09-13 | The mobile application in Transtek Mojodat FAM (Fixed Asset Management) 2.4.6 allows remote attackers to fetch cleartext passwords upon a successful login requ… |
CVE-2022-38770 | Medium | 5.3 | 2022-09-13 | The mobile application in Transtek Mojodat FAM (Fixed Asset Management) 2.4.6 allows remote attackers to fetch other users' data upon a successful login reques… |