Vulnerabilities

TI-2025-24297 CVE-2025-34141 · GHSA-wffg-jjj6-c47h

ETQ Reliance CG < SE.2025.1 Reflected XSS in `SQLConverterServlet`

LOW 27

A reflected cross-site scripting (XSS) vulnerability exists in ETQ Reliance CG (legacy) platform within the `SQLConverterServlet` component.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.02089 Published 2025-07-22 Fixed in SE.2025.1 CWE-116

TI-2025-24296 CVE-2025-34140 · GHSA-8j4g-7p6h-w548

ETQ Reliance CG/NXG API Authorization Bypass via ;localized-text URI Suffix

MEDIUM 45

An authorization bypass vulnerability exists in ETQ Reliance (legacy CG and NXG SaaS platforms).

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00692 Published 2025-07-22 Fixed in SE.2025.1, 2025.1.2 CWE-639

TI-2025-24298 CVE-2025-34142 · GHSA-v8jr-7g4w-cp39

ETQ Reliance CG < SE.2025.1 / < 2025.1.2 XXE Injection in SSO SAML Handler

LOW 38

An XML External Entity (XXE) injection vulnerability exists in ETQ Reliance on the CG (legacy) platform within the `/resources/sessions/sso` endpoint.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00972 Published 2025-07-22 Fixed in SE.2025.1, 2025.1.2 CWE-611

TI-2025-24299 CVE-2025-34143 · GHSA-v93r-q3gh-68x8

ETQ Reliance CG Authentication Bypass via Trailing Space RCE

HIGH 75

An authentication bypass vulnerability exists in ETQ Reliance on the CG (legacy) platform.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.38043 Published 2025-07-22 Fixed in MP-4583 CWE-269

Vulnerabilities

Filters

ETQ Reliance CG < SE.2025.1 Reflected XSS in `SQLConverterServlet`

ETQ Reliance CG/NXG API Authorization Bypass via ;localized-text URI Suffix

ETQ Reliance CG < SE.2025.1 / < 2025.1.2 XXE Injection in SSO SAML Handler

ETQ Reliance CG Authentication Bypass via Trailing Space RCE