Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: Centralny Instytut Ochrony Pracy - Państwowy Instytut Badawczy Clear all filters
TI-2026-20715 CVE-2026-25608 · GHSA-3mwj-g532-hjvp

Lack of traffic encryption in STER

Priority LOW 11

STER uses unencrypted TCP traffic to transmit data over the network.

CVSS 4.0LOW 2.3 Network No auth User interaction EPSS 0.00208 Published 2026-05-22 Fixed in 9.5 CWE-319
TI-2026-20714 CVE-2026-25607 · GHSA-86fv-7c2x-fgx6

Weak password encoding in STER

Priority LOW 24

Use of a weak password encoding algorithm in STER software allows the value of the password to be guessed after analyzing how passwords with known values are encoded.

CVSS 4.0MEDIUM 5.7 Local Low privileges No interaction EPSS 0.00096 Published 2026-05-22 Fixed in 9.5 CWE-261
TI-2026-20713 CVE-2026-25606 · GHSA-6vwp-cg8j-vqgh

SQL Injection in STER

Priority LOW 39

A SQL injection vulnerability has been identified in STER.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00225 Published 2026-05-22 Fixed in 9.5 CWE-89