Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Vendor: Oceanic Software Clear all filters
TI-2024-07983 CVE-2024-8607 · GHSA-h346-3fwc-p8mx

SQLi in Oceanic Software's ValeApp

Priority MEDIUM 40

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Oceanic Software ValeApp allows SQL Injection.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.005 Published 2024-09-27 Fixed in v2.0.0 CWE-89
TI-2024-07984 CVE-2024-8608 · GHSA-cc38-c48r-xgx6

Stored XSS in Oceanic Software's ValeApp

Priority LOW 31

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Oceanic Software ValeApp allows Stored XSS.

CVSS 4.0HIGH 7.2 Network Low privileges No interaction EPSS 0.00293 Published 2024-09-27 Fixed in v2.0.0 CWE-79
TI-2024-07985 CVE-2024-8609 · GHSA-6rjg-v5w9-9cc5

Improper Access Control in Oceanic Software's ValeApp

Priority MEDIUM 44

Insertion of Sensitive Information into Log File vulnerability in Oceanic Software ValeApp allows Query System for Information.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00468 Published 2024-09-27 Fixed in v2.0.0 CWE-532
TI-2024-08018 CVE-2024-8643 · GHSA-5w3f-r5cr-vf3x

Session Hijacking in Oceanic Software's ValeApp

Priority MEDIUM 48

Session Fixation vulnerability in Oceanic Software ValeApp allows Brute Force, Session Hijacking.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.0046 Published 2024-09-27 Fixed in v2.0.0 CWE-384
TI-2024-08019 CVE-2024-8644 · GHSA-5v8f-chv2-mx64

Cleartext Storage of Sensitive Information in Oceanic Software's ValeApp

Priority MEDIUM 48

Cleartext Storage of Sensitive Information in a Cookie vulnerability in Oceanic Software ValeApp allows Protocol Manipulation, : JSON Hijacking (aka JavaScript Hijacking).

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00266 Published 2024-09-27 Fixed in v2.0.0 CWE-315