Sesami

Records11All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

Sesami records in CISA KEV

No Sesami vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Cash Point & Transport Optimizer 11 records HIGH

Records

11 records

TI-2023-14979 CVE-2023-31300 · GHSA-652f-58jv-j9fp

An issue was discovered in Sesami Cash Point & Transport Optimizer (CPTO) version 6.3.8.6…

HIGH 74

An issue was discovered in Sesami Cash Point & Transport Optimizer (CPTO) version 6.3.8.6 (#718), allows remote attackers to obtain sensitive information via transmission of unencrypted, cleartext credentials during Pass…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0036 Published 2023-12-29 No fix listed CWE-319

TI-2023-14974 CVE-2023-31295 · GHSA-v6v8-vp6w-87v3

CSV Injection vulnerability in Sesami Cash Point & Transport Optimizer (CPTO) version…

LOW 34

CSV Injection vulnerability in Sesami Cash Point & Transport Optimizer (CPTO) version 6.3.8.6 (#718), allows remote attackers to obtain sensitive information via the User Profile field.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00579 Published 2023-12-29 No fix listed CWE-1236

TI-2023-14973 CVE-2023-31294 · GHSA-92pp-5g9w-8mgr

CSV Injection vulnerability in Sesami Cash Point & Transport Optimizer (CPTO) version…

LOW 34

CSV Injection vulnerability in Sesami Cash Point & Transport Optimizer (CPTO) version 6.3.8.6 (#718), allows remote attackers to obtain sensitive information via the Delivery Name field.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00579 Published 2023-12-29 No fix listed CWE-1236

TI-2023-14975 CVE-2023-31296 · GHSA-hrfw-pwjg-7prc

CSV Injection vulnerability in Sesami Cash Point & Transport Optimizer (CPTO) version…

LOW 30

CSV Injection vulnerability in Sesami Cash Point & Transport Optimizer (CPTO) version 6.3.8.6 (#718), allows attackers to obtain sensitive information via the User Name field.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00376 Published 2023-12-29 No fix listed CWE-94

TI-2023-14971 CVE-2023-31292 · GHSA-xch8-frxx-v8q6

An issue was discovered in Sesami Cash Point & Transport Optimizer (CPTO) 6.3.8.6 (#718)…

LOW 30

An issue was discovered in Sesami Cash Point & Transport Optimizer (CPTO) 6.3.8.6 (#718), allows local attackers to obtain sensitive information and bypass authentication via "Back Button Refresh" attack.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00172 Published 2023-12-29 No fix listed CWE-287

TI-2023-14981 CVE-2023-31302 · GHSA-5p89-3w9x-m7cr

Cross Site Scripting (XSS) vulnerability in Sesami Cash Point & Transport Optimizer…

LOW 28

Cross Site Scripting (XSS) vulnerability in Sesami Cash Point & Transport Optimizer (CPTO) 6.3.8.6 (#718), allows remote attackers to execute arbitrary code via the Teller field.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00455 Published 2023-12-29 No fix listed CWE-79

TI-2023-14980 CVE-2023-31301 · GHSA-r2x8-rf8m-w2r2

Stored Cross Site Scripting (XSS) Vulnerability in Sesami Cash Point & Transport…

LOW 28

Stored Cross Site Scripting (XSS) Vulnerability in Sesami Cash Point & Transport Optimizer (CPTO) version 6.3.8.6 (#718), allows remote attackers to execute arbitrary code and obtain sensitive information via the Usernam…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00455 Published 2023-12-29 No fix listed CWE-79

TI-2023-14978 CVE-2023-31299 · GHSA-w8rw-hj58-7665

Cross Site Scripting (XSS) vulnerability in Sesami Cash Point & Transport Optimizer…

LOW 28

Cross Site Scripting (XSS) vulnerability in Sesami Cash Point & Transport Optimizer (CPTO) version 6.3.8.6 (#718), allows remote attackers to execute arbitrary code via the Barcode field of a container.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00455 Published 2023-12-29 No fix listed CWE-79

TI-2023-14977 CVE-2023-31298 · GHSA-5whq-6jp7-w2mg

Cross Site Scripting (XSS) vulnerability in Sesami Cash Point & Transport Optimizer…

LOW 22

Cross Site Scripting (XSS) vulnerability in Sesami Cash Point & Transport Optimizer (CPTO) version 6.3.8.6 (#718), allows remote attackers to execute arbitrary code and obtain sensitive information via the User ID field…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00436 Published 2023-12-29 No fix listed CWE-79

TI-2023-14976 CVE-2023-31297 · GHSA-pc49-g522-pmh5

An issue was discovered in SESAMI planfocus CPTO (Cash Point & Transport Optimizer)…

LOW 22

An issue was discovered in SESAMI planfocus CPTO (Cash Point & Transport Optimizer) 6.3.8.6 718.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.0031 Published 2023-12-25 No fix listed CWE-79

TI-2023-14972 CVE-2023-31293 · GHSA-jcjf-6r3f-3cjg

An issue was discovered in Sesami Cash Point & Transport Optimizer (CPTO) 6.3.8.6 (#718)…

LOW 21

An issue was discovered in Sesami Cash Point & Transport Optimizer (CPTO) 6.3.8.6 (#718), allows remote attackers to obtain sensitive information and bypass profile restriction via improper access control in the Reader s…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00474 Published 2023-12-29 No fix listed

Open these records in search →

Critical	0
High	3
Medium	8
Low	0
No CVSS	0