Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Priority MEDIUM 48

This vulnerability exists in the ERP system due to unsafe deserialization of user controlled data in the affected functionality.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00423 Published 2026-10-07 No fix listed CWE-502
Priority MEDIUM 48

This vulnerability exists in the ERP system due to insufficient validation and parameterization of user supplied input in an API endpoint.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00325 Published 2026-10-07 No fix listed CWE-89
Priority MEDIUM 48

This vulnerability exists in the ERP system due to improper validation of payment callback parameters and inadequate authentication controls in API endpoint.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00255 Published 2026-10-07 No fix listed CWE-345