Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: A3factura Component: A3factura Clear all filters
TI-2026-02292 CVE-2026-2680 · GHSA-g8p2-q5wh-ppx2

Multiple vulnerabilities in A3factura software

Priority LOW 21

Reflected Cross-Site Scripting (XSS) on the A3factura web platform, in parameter 'customerVATNumber', in 'a3factura-app.wolterskluwer.es/#/incomes/salesDeliveryNotes' endpoint, which could allow an attacker to execute ar…

CVSS 4.0MEDIUM 4.8 Network Low privileges User interaction EPSS 0.00204 Published 2026-02-26 No fix listed CWE-79
TI-2026-02291 CVE-2026-2679 · GHSA-jm25-jfc5-xhx6

Multiple vulnerabilities in A3factura software

Priority LOW 21

Reflected Cross-Site Scripting (XSS) on the A3factura web platform, in parameter 'customerName', in 'a3factura-app.wolterskluwer.es/#/incomes/salesInvoices' endpoint, which could allow an attacker to execute arbitrary co…

CVSS 4.0MEDIUM 4.8 Network Low privileges User interaction EPSS 0.00192 Published 2026-02-26 No fix listed CWE-79
TI-2026-02290 CVE-2026-2678 · GHSA-vq69-qj8j-4r8j

Multiple vulnerabilities in A3factura software

Priority LOW 21

Reflected Cross-Site Scripting (XSS) on the A3factura web platform, in parameter 'name', parameter 'name', in 'a3factura-app.wolterskluwer.es/#/incomes/customers' endpoint, which could allow an attacker to execute arbitr…

CVSS 4.0MEDIUM 4.8 Network Low privileges User interaction EPSS 0.00192 Published 2026-02-26 No fix listed CWE-79
TI-2026-02289 CVE-2026-2677 · GHSA-xp3g-cfwm-4q5h

Multiple vulnerabilities in A3factura software

Priority LOW 21

Reflected Cross-Site Scripting (XSS) on the A3factura web platform, in parameter 'name', in 'a3factura-app.wolterskluwer.es/#/incomes/representatives-management' endpoint, which could allow an attacker to execute arbitra…

CVSS 4.0MEDIUM 4.8 Network Low privileges User interaction EPSS 0.00192 Published 2026-02-26 No fix listed CWE-79