Priority MEDIUM 46
: Use of Hard-coded Credentials : Exposure of Sensitive Information to an Unauthorized Actor : Improper Access Control vulnerability in Priority Portal Generator addon to Priority ERP (developed by Soft Solutions).
CVSS 3.1CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.00335 · Published 2026-08-13 · No fix listed CWE-798
Priority MEDIUM 46
: Missing Authentication for Critical Function vulnerability in Priority Portal Generator addon to Priority ERP (developed by Soft Solutions).
CVSS 3.1CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.00413 · Published 2026-08-13 · No fix listed CWE-306
Priority MEDIUM 43
: Improper Access Control vulnerability in Priority Portal Generator addon to Priority ERP (developed by Soft Solutions).
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.00394 · Published 2026-08-13 · No fix listed CWE-284
Priority MEDIUM 46
: Client-Side Enforcement of Server-Side Security vulnerability in Priority Portal Generator addon to Priority ERP (developed by Soft Solutions).
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.00427 · Published 2026-08-13 · No fix listed CWE-602
Priority MEDIUM 48
: Exposure of Sensitive Information to an Unauthorized Actor : Exposure of Private Personal Information to an Unauthorized Actor vulnerability in Priority Portal Generator addon to Priority ERP (developed by Soft Solutio…
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.00427 · Published 2026-08-13 · No fix listed CWE-200
Priority LOW 30
: Observable Discrepancy vulnerability in Priority Portal Generator addon to Priority ERP (developed by Soft Solutions).
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.0033 · Published 2026-08-13 · No fix listed CWE-203
Priority MEDIUM 42
: Improper Access Control vulnerability in Priority Portal Generator addon to Priority ERP (developed by Soft Solutions).
CVSS 3.1HIGH 8.2· Network · No auth · No interaction · EPSS 0.00335 · Published 2026-08-13 · No fix listed CWE-284
Priority MEDIUM 49
: Improper Authentication vulnerability in Priority Portal Generator addon to Priority ERP (developed by Soft Solutions).
CVSS 3.1CRITICAL 10.0· Network · No auth · No interaction · EPSS 0.00498 · Published 2026-08-13 · No fix listed CWE-287
Priority MEDIUM 43
: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Priority Portal Generator addon to Priority ERP (developed by Soft Solutions)..
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.00416 · Published 2026-08-13 · No fix listed CWE-200
Priority LOW 21
CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')
CVSS 3.1MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.00173 · Published 2025-12-29 · No fix listed CWE-79
Priority LOW 21
CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')
CVSS 3.1MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.00173 · Published 2025-12-29 · No fix listed CWE-79
Priority LOW 21
CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')
CVSS 3.1MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.00173 · Published 2025-12-29 · No fix listed CWE-79
Priority MEDIUM 40
CWE-434 Unrestricted Upload of File with Dangerous Type
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00335 · Published 2025-12-29 · No fix listed CWE-434
Priority LOW 26
CWE-601 URL Redirection to Untrusted Site ('Open Redirect')
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00172 · Published 2025-12-29 · No fix listed CWE-601
Priority LOW 39
Priority – CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00498 · Published 2024-12-30 · Fixed in Upgrade to version 24.1 or later and enable "PRIWALL", or block direct access to the portal from the internet and use a VPN or specific addresses CWE-200
Priority LOW 33
Priority – CWE-552: Files or Directories Accessible to External Parties
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00332 · Published 2024-08-20 · Fixed in Upgrade to version 24.0 or later CWE-552
Priority LOW 33
Priority – CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00331 · Published 2024-08-20 · Fixed in Upgrade to version 24.0 or later CWE-200
Priority LOW 27
Priority - CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00269 · Published 2024-08-20 · Fixed in Upgrade to version 24.0 or later CWE-80
Priority LOW 39
Priority PRI WEB Portal Add-On for Priority ERP on prem - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00402 · Published 2024-07-30 · Fixed in Upgrade to version 24.0 or later (that includes "PRIWALL"). CWE-200
Priority LOW 27
Mashov - CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00269 · Published 2024-07-30 · Fixed in 3.8.46 CWE-80
Priority MEDIUM 50
Priority Web version 19.1.0.68, parameter manipulation on an unspecified end-point may allow authentication bypass.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00688 · Published 2023-02-15 · Fixed in version 22.1 Web CWE-287
Priority MEDIUM 50
Priority Windows may allow Command Execution via SQL Injection using an unspecified method.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00854 · Published 2023-02-15 · Fixed in version 22.1 Web CWE-89
Priority LOW 29
this vulnerability affect user that even not allowed to access via the web interface.
CVSS 3.1MEDIUM 6.3· Network · Low privileges · No interaction · EPSS 0.00564 · Published 2022-07-06 · No fix listed CWE-639
Priority LOW 25
An attacker can access to "Forgot my password" button, as soon as he puts users is valid in the system, the system would issue a message that a password reset email had been sent to user.
CVSS 3.1MEDIUM 5.5· Adjacent network · Low privileges · No interaction · EPSS 0.00452 · Published 2022-07-06 · Fixed in 22.0 CWE-640
Priority LOW 29
Cross Site Scripting (XSS) in the "Reset Password" page form of Priority Enterprise Management System v8.00 allows attackers to execute javascript on behalf of the victim by sending a malicious URL or directing the victi…
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00846 · Published 2021-04-14 · No fix listed CWE-79
THREATIST.IORead the docs