Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
Abacre records in CISA KEVNo Abacre vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority MEDIUM 60
Abacre Retail Point of Sale 14.0.0.396 is affected by a stored cross-site scripting (XSS) vulnerability in the Clients module.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.002 · Published 2026-01-20 · No fix listed CWE-79
Priority LOW 34
Abacre Retail Point of Sale 14.0.0.396 is vulnerable to content-based blind SQL injection.
CVSS 3.1MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.00213 · Published 2026-01-20 · No fix listed CWE-89
Priority LOW 32
Abacre Restaurant Point of Sale (POS) up to 15.0.0.1656 are vulnerable to Cleartext Storage of Sensitive Information in Memory.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00263 · Published 2025-12-03 · No fix listed CWE-312
