TI-2023-03799 CVE-2023-4103 · GHSA-xwr3-6hhp-5cch
Multiple vulnerabilities in IDM Sistemas QSige
Priority MEDIUM 41
QSige statistics are affected by a remote SQLi vulnerability.
IDM Sistemas QSige
Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high7CVSS 7.0–8.9
Exploited now
IDM Sistemas QSige records in CISA KEVNo IDM Sistemas QSige vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
7 records in Qsige · all components
TI-2023-03798 CVE-2023-4102 · GHSA-3frv-mxwj-89pr
Multiple vulnerabilities in IDM Sistemas QSige
Priority MEDIUM 41
QSige login SSO does not have an access control mechanism to verify whether the user requesting a resource has sufficient permissions to do so.
TI-2023-03797 CVE-2023-4101 · GHSA-2f7q-533q-p67m
Multiple vulnerabilities in IDM Sistemas QSige
Priority MEDIUM 41
The QSige login SSO does not have an access control mechanism to verify whether the user requesting a resource has sufficient permissions to do so.
TI-2023-03794 CVE-2023-4098 · GHSA-9932-r54r-4q8x
Multiple vulnerabilities in IDM Sistemas QSige
Priority MEDIUM 41
It has been identified that the web application does not correctly filter input parameters, allowing SQL injections, DoS or information disclosure.
TI-2023-03793 CVE-2023-4097 · GHSA-8mx5-wvh2-fvmf
Multiple vulnerabilities in IDM Sistemas QSige
Priority MEDIUM 41
The file upload functionality is not implemented correctly and allows uploading of any type of file.
TI-2023-03796 CVE-2023-4100 · GHSA-wq2h-7v4w-5qc7
Multiple vulnerabilities in IDM Sistemas QSige
Priority LOW 36
Allows an attacker to perform XSS attacks stored on certain resources.
TI-2023-03795 CVE-2023-4099 · GHSA-9r3h-r6g3-69f5
Multiple vulnerabilities in IDM Sistemas QSige
Priority LOW 33
The QSige Monitor application does not have an access control mechanism to verify whether the user requesting a resource has sufficient permissions to do so.