Vulnerabilities

TI-2014-03533 CVE-2014-4311 · GHSA-qvhc-67r6-hr3h

Epicor Enterprise 7.4 before FS74SP6_HotfixTL054181 allows attackers to obtain the (1)…

LOW 32

Epicor Enterprise 7.4 before FS74SP6_HotfixTL054181 allows attackers to obtain the (1) Database Connection and (2) E-mail Connection passwords by reading HTML source code of the database connection and email settings pag…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.05783 Published 2014-11-04 No fix listed CWE-200

TI-2014-03534 CVE-2014-4312 · GHSA-rvhg-jhq4-7wh7

Multiple cross-site scripting (XSS) vulnerabilities in Epicor Enterprise 7.4 before…

LOW 27

Multiple cross-site scripting (XSS) vulnerabilities in Epicor Enterprise 7.4 before FS74SP6_HotfixTL054181 allow remote attackers to inject arbitrary web script or HTML via the (1) Notes section to Order details; (2) Des…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.04179 Published 2014-10-10 No fix listed CWE-79

Vulnerabilities

Filters

Epicor Enterprise 7.4 before FS74SP6_HotfixTL054181 allows attackers to obtain the (1)…

Multiple cross-site scripting (XSS) vulnerabilities in Epicor Enterprise 7.4 before…