Abacus

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Abacus records in CISA KEV

No Abacus vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Abacus 1 record LOW Abacus Erp 2018 1 record MEDIUM Abacus Erp 2019 1 record MEDIUM Abacus Erp 2020 1 record MEDIUM Abacus Erp 2021 1 record MEDIUM Abacus Erp 2022 1 record MEDIUM

Records

2 records

TI-2022-00961 CVE-2022-1065 · GHSA-gc8j-wq9j-m4cx

Multi Factor Authentication Bypass in various versions of Abacus ERP

MEDIUM 43

A vulnerability within the authentication process of Abacus ERP allows a remote attacker to bypass the second authentication factor.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02885 Published 2022-04-19 Fixed in R1 of 2022-01-15, R4 of 2022-01-15 +2 CWE-304

TI-2019-13984 CVE-2019-19381 · GHSA-c68p-p38j-3rqx

oauth/oauth2/v1/saml/ in Abacus OAuth Login 2019_01_r4_20191021_0000 before prior to R4…

LOW 28

oauth/oauth2/v1/saml/ in Abacus OAuth Login 2019_01_r4_20191021_0000 before prior to R4 (20.11.2019 Hotfix) allows Reflected Cross Site Scripting (XSS) via an error message.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00724 Published 2020-03-11 No fix listed CWE-79

Open these records in search →

Critical	0
High	1
Medium	1
Low	0
No CVSS	0