Vulnerabilities

TI-2026-84248 CVE-2026-108060 · GHSA-q7qh-wq2f-chrc

Stored cross-site scripting in Alosuite delivery note functionality

LOW 23

A stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.003 Published 2026-11-03 No fix listed CWE-79

TI-2026-84247 CVE-2026-108059 · GHSA-fp95-25qw-hx2w

Stored cross-site scripting in AM System ALO Suite delivery notes

LOW 23

A stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.003 Published 2026-11-03 No fix listed CWE-79

TI-2026-84246 CVE-2026-108058 · GHSA-cfpm-8433-2hj6

Stored cross-site scripting in ALO Suite delivery notes

LOW 23

A stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.003 Published 2026-11-03 No fix listed CWE-79

TI-2026-84245 CVE-2026-108057 · GHSA-c95q-p48h-92rh

Stored cross-site scripting in ALO Suite delivery notes

LOW 23

A stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.003 Published 2026-11-03 No fix listed CWE-79

TI-2026-84244 CVE-2026-108056 · GHSA-fghv-6j2v-vmqh

Stored cross-site scripting in AM System ALO Suite delivery notes

LOW 23

A stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.003 Published 2026-11-03 No fix listed CWE-79

TI-2026-84243 CVE-2026-108055 · GHSA-r27j-x4qx-6whm

Stored cross-site scripting in Alosuite delivery notes

LOW 23

A stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.003 Published 2026-11-03 No fix listed CWE-79

TI-2026-84242 CVE-2026-108054 · GHSA-w4vf-pvj6-73g5

Stored cross-site scripting in ALO Suite delivery notes

LOW 23

A stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.003 Published 2026-11-03 No fix listed CWE-79

TI-2026-84241 CVE-2026-108053 · GHSA-h76m-8fwf-5g9f

Stored cross-site scripting in Alosuite delivery notes

LOW 23

A stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.003 Published 2026-11-03 No fix listed CWE-79

TI-2026-84240 CVE-2026-108052 · GHSA-p836-85q4-qgxj

Stored cross-site scripting in AM System ALO Suite delivery notes

LOW 23

A stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.003 Published 2026-11-03 No fix listed CWE-79

TI-2026-84239 CVE-2026-108051 · GHSA-mm79-g99g-7ff5

Stored cross-site scripting in ALO Suite delivery note functionality

LOW 23

A stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.003 Published 2026-11-03 No fix listed CWE-79

TI-2026-84238 CVE-2026-108050 · GHSA-37cc-rw3j-pvqf

Stored cross-site scripting in ALO Suite delivery notes

LOW 23

A stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.003 Published 2026-11-03 No fix listed CWE-79

TI-2026-84237 CVE-2026-108049 · GHSA-hvf9-wq6h-px7p

Clickjacking in AM System ALO Suite login interface

LOW 24

Clickjacking vulnerability in the Alosuite web application.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.0042 Published 2026-11-03 No fix listed CWE-1021

TI-2026-84236 CVE-2026-108048 · GHSA-fh32-xrpw-f94g

Missing rate limit in ALO Suite password reset enables email flooding

LOW 37

Vulnerability due to a lack of request limits in Alosuite’s password recovery functionality.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00401 Published 2026-11-03 No fix listed CWE-770

TI-2026-84235 CVE-2026-108047 · GHSA-7988-46w5-6v82

Improper authorization in ALO Suite user invitations

LOW 39

Inadequate authorization vulnerability in Alosuite’s user invitation functionality.

CVSS 4.0HIGH 8.6 Network Low privileges No interaction EPSS 0.00278 Published 2026-11-03 No fix listed CWE-285

TI-2026-84234 CVE-2026-108046 · GHSA-fvq5-h5xm-rp92

Insecure direct object reference in AM System ALO Suite exposes data

LOW 37

Direct Object Reference (IDOR) vulnerability in Alosuite due to insufficient authorization checks when processing object identifiers.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00392 Published 2026-11-03 No fix listed CWE-639

TI-2023-12411 CVE-2023-27779 · GHSA-c87m-fg5p-pc54

AM Presencia v3.7.3 was discovered to contain a SQL injection vulnerability via the user parameter in the login form.

MEDIUM 45

AM Presencia v3.7.3 was discovered to contain a SQL injection vulnerability via the user parameter in the login form.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00984 Published 2023-04-13 No fix listed CWE-89

Vulnerabilities

Filters