Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: GG Soft Software Services Inc. Clear all filters
TI-2026-65892 CVE-2026-85215 · GHSA-rm6x-29fh-f8mc

SQL Injection in GG Soft's Paperwork

Priority LOW 30

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in GG Soft Software Services Inc.

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00183 Published 2026-10-02 No fix listed CWE-89
TI-2025-12884 CVE-2025-14101 · GHSA-fr79-j7m2-8x6g

IDOR in GG Soft's PaperWork

Priority LOW 31

Authorization Bypass Through User-Controlled Key vulnerability in GG Soft Software Services Inc.

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00224 Published 2025-12-17 Fixed in 6.0 CWE-639
TI-2025-10043 CVE-2025-10968 · GHSA-v4pm-h4rc-6r9v

SQLi in GG Soft's PaperWork

Priority MEDIUM 40

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection'), CWE - 564 - SQL Injection: Hibernate vulnerability in GG Soft Software Services Inc.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00323 Published 2025-11-07 Fixed in 6.1.0.9398 CWE-89