Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: Asseco Business Solutions S.A. Clear all filters
TI-2024-04640 CVE-2024-4996 · GHSA-xw4r-rf67-rf6g

Hardcoded Password in Wapro ERP Desktop

Priority MEDIUM 49

Use of a hard-coded password for a database administrator account created during Wapro ERP installation allows an attacker to retrieve embedded sensitive data stored in the database.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.0057 Published 2024-12-18 Fixed in 8.90.0 CWE-259
TI-2024-04639 CVE-2024-4995 · GHSA-5922-vxrc-h3gf

Protocol Downgrade in Wapro ERP Desktop

Priority MEDIUM 49

Wapro ERP Desktop is vulnerable to MS SQL protocol downgrade request from a server side, what could lead to an unencrypted communication vulnerable to data interception and modification.

CVSS 4.0CRITICAL 9.1 Network No auth No interaction EPSS 0.00924 Published 2024-12-18 Fixed in 9.00.0 CWE-757