Vulnerabilities

TI-2026-57202 CVE-2026-82915 · GHSA-mr3f-cqg8-v229

Path Traversal in Bimser Solution Software's eBA Plus

LOW 29

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Bimser Solution Software Trade Inc.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00295 Published 2026-09-28 Fixed in 10.0.11 CWE-22

TI-2026-58477 CVE-2026-85134 · GHSA-468q-55rr-hw4m

MEDIUM 40

Unrestricted upload of file with dangerous type vulnerability in Bimser Solution Software Trade Inc.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00266 Published 2026-09-28 Fixed in 10.0.11 CWE-434

TI-2026-57226 CVE-2026-82969 · GHSA-w8rw-4wrv-gh97

LOW 23

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Bimser Solution Software Trade Inc.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00148 Published 2026-09-28 Fixed in 10.0.11 CWE-79

TI-2025-07812 CVE-2025-8532 · GHSA-3grp-7h7h-xcr6

LOW 27

Authorization Bypass Through User-Controlled Key, Improper Authorization vulnerability in Bimser Solution Software Trade Inc.

CVSS 3.1MEDIUM 6.4 Local Low privileges No interaction EPSS 0.00128 Published 2025-09-19 Fixed in 6.7.166 CWE-285