Read the docs

Oceanic Software

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

Oceanic Software records in CISA KEV

No Oceanic Software vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Valeapp 5 records MEDIUM

Records

5 records in Valeapp · all components

TI-2024-08019 CVE-2024-8644 · GHSA-5v8f-chv2-mx64

Cleartext Storage of Sensitive Information in Oceanic Software's ValeApp

Priority MEDIUM 48

Cleartext Storage of Sensitive Information in a Cookie vulnerability in Oceanic Software ValeApp allows Protocol Manipulation, : JSON Hijacking (aka JavaScript Hijacking).

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00266 Published 2024-09-27 Fixed in v2.0.0 CWE-315
TI-2024-08018 CVE-2024-8643 · GHSA-5w3f-r5cr-vf3x

Session Hijacking in Oceanic Software's ValeApp

Priority MEDIUM 48

Session Fixation vulnerability in Oceanic Software ValeApp allows Brute Force, Session Hijacking.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.0046 Published 2024-09-27 Fixed in v2.0.0 CWE-384
TI-2024-07985 CVE-2024-8609 · GHSA-6rjg-v5w9-9cc5

Improper Access Control in Oceanic Software's ValeApp

Priority MEDIUM 44

Insertion of Sensitive Information into Log File vulnerability in Oceanic Software ValeApp allows Query System for Information.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00468 Published 2024-09-27 Fixed in v2.0.0 CWE-532
TI-2024-07983 CVE-2024-8607 · GHSA-h346-3fwc-p8mx

SQLi in Oceanic Software's ValeApp

Priority MEDIUM 40

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Oceanic Software ValeApp allows SQL Injection.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.005 Published 2024-09-27 Fixed in v2.0.0 CWE-89
TI-2024-07984 CVE-2024-8608 · GHSA-cc38-c48r-xgx6

Stored XSS in Oceanic Software's ValeApp

Priority LOW 31

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Oceanic Software ValeApp allows Stored XSS.

CVSS 4.0HIGH 7.2 Network Low privileges No interaction EPSS 0.00293 Published 2024-09-27 Fixed in v2.0.0 CWE-79
Open these records in search →