SFS Consulting

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

SFS Consulting records in CISA KEV

No SFS Consulting vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

3 records

TI-2024-06579 CVE-2024-7104 · GHSA-w784-6hh8-995v

MEDIUM 42

Improper Control of Generation of Code ('Code Injection') vulnerability in SFS Consulting ww.Winsure allows Code Injection.

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.00507 Published 2024-09-16 Fixed in 4.6.2 CWE-94

TI-2024-06573 CVE-2024-7098 · GHSA-rh54-7qq9-x5v8

MEDIUM 42

Improper Restriction of XML External Entity Reference vulnerability in SFS Consulting ww.Winsure allows XML Injection.

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.00485 Published 2024-09-16 Fixed in 4.6.2 CWE-611

TI-2024-05942 CVE-2024-6401 · GHSA-hg4p-55w9-888w

MEDIUM 42

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in SFS Consulting InsureE GL allows SQL Injection.

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.0042 Published 2024-09-16 Fixed in 4.6.2 CWE-89