Read the docs

Utarit Informatics Services Inc.

Records11All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high7CVSS 7.0–8.9

Exploited now

Utarit Informatics Services Inc. records in CISA KEV

No Utarit Informatics Services Inc. vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Soliclub 7 records MEDIUM Solipay Mobile 3 records MEDIUM Persolus 1 record MEDIUM

Records

11 records

TI-2023-04743 CVE-2023-5155 · GHSA-2vv9-3gf2-vjx5

SQLi in Utarit's Smart Deposit System

Priority MEDIUM 49

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Utarit Information Technologies SoliPay Mobile App allows SQL Injection.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00519 Published 2024-02-15 Fixed in 5.0.8 CWE-89
TI-2024-03099 CVE-2024-3306 · GHSA-rfvq-f6wq-mfhj

IDOR in Utarit Information's SoliClub

Priority MEDIUM 44

Authorization Bypass Through User-Controlled Key vulnerability in Utarit Information SoliClub allows Exploiting Incorrectly Configured Access Control Security Levels.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00357 Published 2024-09-12 Fixed in 4.4.0, 5.2.1 CWE-639
TI-2024-03098 CVE-2024-3305 · GHSA-375w-qxcp-h82p

IDOR in Utarit Information's SoliClub

Priority MEDIUM 44

Authorization Bypass Through User-Controlled Key, Missing Authorization vulnerability in Utarit Information SoliClub allows Retrieve Embedded Sensitive Data.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00385 Published 2024-09-12 Fixed in 4.4.0, 5.2.1 CWE-639
TI-2023-01090 CVE-2023-1152 · GHSA-mwfw-j98c-gjhg

SQLi in Utarit Persolus

Priority MEDIUM 44

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Utarit Information Technologies Persolus allows SQL Injection.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0062 Published 2023-03-17 Fixed in 2.03.93 CWE-89
TI-2025-00872 CVE-2025-1031 · GHSA-h9jv-6gv7-xp9q

IDOR in Utarit Informatics' SoliClub

Priority LOW 39

Authorization Bypass Through User-Controlled Key vulnerability in Utarit Informatics Services Inc.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00304 Published 2025-12-18 Fixed in 5.3.7 CWE-639
TI-2025-00871 CVE-2025-1030 · GHSA-ppgf-6v2c-6ggr

Sensitive Data Exposure in Utarit Informatics' SoliClub

Priority LOW 39

Exposure of Private Personal Information to an Unauthorized Actor vulnerability in Utarit Informatics Services Inc.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00302 Published 2025-12-18 Fixed in 5.3.7 CWE-359
TI-2023-05746 CVE-2023-6255 · GHSA-w2r7-j937-rrj3

Hardcoded Credentals in SoliClub Mobile App

Priority LOW 39

Use of Hard-coded Credentials vulnerability in Utarit Information Technologies SoliPay Mobile App allows Read Sensitive Strings Within an Executable.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00448 Published 2024-02-15 Fixed in 5.0.8 CWE-798
TI-2023-04596 CVE-2023-4993 · GHSA-jhxj-w2j8-p3gf

Sensetive Data Exposure in Utarit's Soliclub

Priority LOW 39

Incorrect Use of Privileged APIs vulnerability in Utarit Information Technologies SoliPay Mobile App allows Collect Data as Provided by Users.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00448 Published 2024-02-15 Fixed in 5.0.8 CWE-648
Open these records in search →