Read the docs

Uyumsoft

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Uyumsoft records in CISA KEV

No Uyumsoft vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

2 records in Lioxerp · all components

TI-2023-05519 CVE-2023-5989 · GHSA-hf39-9g29-9q2w

Stored XSS in Uyumsoft ERP

Priority LOW 27

An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Uyumsoft Information System and Technologies' LioXERP allows an authenticated user to execute Stored XSS.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00331 Published 2023-12-21 Fixed in v.146 CWE-79
TI-2023-05518 CVE-2023-5988 · GHSA-x695-cm9c-7ggq

Reflected XSS in Uyumsoft ERP

Priority LOW 27

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Uyumsoft Information System and Technologies LioXERP allows Reflected XSS.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00331 Published 2023-12-21 Fixed in v.146 CWE-79
Open these records in search →