Read the docs

Asseco Business Solutions S.A.

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Asseco Business Solutions S.A. records in CISA KEV

No Asseco Business Solutions S.A. vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2024-04640 CVE-2024-4996 · GHSA-xw4r-rf67-rf6g

Hardcoded Password in Wapro ERP Desktop

Priority MEDIUM 49

Use of a hard-coded password for a database administrator account created during Wapro ERP installation allows an attacker to retrieve embedded sensitive data stored in the database.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.0057 Published 2024-12-18 Fixed in 8.90.0 CWE-259
TI-2024-04639 CVE-2024-4995 · GHSA-5922-vxrc-h3gf

Protocol Downgrade in Wapro ERP Desktop

Priority MEDIUM 49

Wapro ERP Desktop is vulnerable to MS SQL protocol downgrade request from a server side, what could lead to an unencrypted communication vulnerable to data interception and modification.

CVSS 4.0CRITICAL 9.1 Network No auth No interaction EPSS 0.00924 Published 2024-12-18 Fixed in 9.00.0 CWE-757
Open these records in search →