SFS Consulting

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

SFS Consulting records in CISA KEV

No SFS Consulting vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Winsure · all components

TI-2024-06579 CVE-2024-7104 · GHSA-w784-6hh8-995v

MEDIUM 42

Improper Control of Generation of Code ('Code Injection') vulnerability in SFS Consulting ww.Winsure allows Code Injection.

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.00507 Published 2024-09-16 Fixed in 4.6.2 CWE-94

TI-2024-06573 CVE-2024-7098 · GHSA-rh54-7qq9-x5v8

MEDIUM 42

Improper Restriction of XML External Entity Reference vulnerability in SFS Consulting ww.Winsure allows XML Injection.

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.00485 Published 2024-09-16 Fixed in 4.6.2 CWE-611