Vulnerabilities

TI-2023-14981 CVE-2023-31302 · GHSA-5p89-3w9x-m7cr

Cross Site Scripting (XSS) vulnerability in Sesami Cash Point & Transport Optimizer…

LOW 28

Cross Site Scripting (XSS) vulnerability in Sesami Cash Point & Transport Optimizer (CPTO) 6.3.8.6 (#718), allows remote attackers to execute arbitrary code via the Teller field.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00455 Published 2023-12-29 No fix listed CWE-79

TI-2023-14980 CVE-2023-31301 · GHSA-r2x8-rf8m-w2r2

Stored Cross Site Scripting (XSS) Vulnerability in Sesami Cash Point & Transport…

LOW 28

Stored Cross Site Scripting (XSS) Vulnerability in Sesami Cash Point & Transport Optimizer (CPTO) version 6.3.8.6 (#718), allows remote attackers to execute arbitrary code and obtain sensitive information via the Usernam…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00455 Published 2023-12-29 No fix listed CWE-79

TI-2023-14979 CVE-2023-31300 · GHSA-652f-58jv-j9fp

An issue was discovered in Sesami Cash Point & Transport Optimizer (CPTO) version 6.3.8.6…

HIGH 74

An issue was discovered in Sesami Cash Point & Transport Optimizer (CPTO) version 6.3.8.6 (#718), allows remote attackers to obtain sensitive information via transmission of unencrypted, cleartext credentials during Pass…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0036 Published 2023-12-29 No fix listed CWE-319

TI-2023-14978 CVE-2023-31299 · GHSA-w8rw-hj58-7665

Cross Site Scripting (XSS) vulnerability in Sesami Cash Point & Transport Optimizer…

LOW 28

Cross Site Scripting (XSS) vulnerability in Sesami Cash Point & Transport Optimizer (CPTO) version 6.3.8.6 (#718), allows remote attackers to execute arbitrary code via the Barcode field of a container.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00455 Published 2023-12-29 No fix listed CWE-79

TI-2023-14977 CVE-2023-31298 · GHSA-5whq-6jp7-w2mg

Cross Site Scripting (XSS) vulnerability in Sesami Cash Point & Transport Optimizer…

LOW 22

Cross Site Scripting (XSS) vulnerability in Sesami Cash Point & Transport Optimizer (CPTO) version 6.3.8.6 (#718), allows remote attackers to execute arbitrary code and obtain sensitive information via the User ID field…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00436 Published 2023-12-29 No fix listed CWE-79

TI-2023-14975 CVE-2023-31296 · GHSA-hrfw-pwjg-7prc

CSV Injection vulnerability in Sesami Cash Point & Transport Optimizer (CPTO) version…

LOW 30

CSV Injection vulnerability in Sesami Cash Point & Transport Optimizer (CPTO) version 6.3.8.6 (#718), allows attackers to obtain sensitive information via the User Name field.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00376 Published 2023-12-29 No fix listed CWE-94

TI-2023-14974 CVE-2023-31295 · GHSA-v6v8-vp6w-87v3

CSV Injection vulnerability in Sesami Cash Point & Transport Optimizer (CPTO) version…

LOW 34

CSV Injection vulnerability in Sesami Cash Point & Transport Optimizer (CPTO) version 6.3.8.6 (#718), allows remote attackers to obtain sensitive information via the User Profile field.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00579 Published 2023-12-29 No fix listed CWE-1236

TI-2023-14973 CVE-2023-31294 · GHSA-92pp-5g9w-8mgr

CSV Injection vulnerability in Sesami Cash Point & Transport Optimizer (CPTO) version…

LOW 34

CSV Injection vulnerability in Sesami Cash Point & Transport Optimizer (CPTO) version 6.3.8.6 (#718), allows remote attackers to obtain sensitive information via the Delivery Name field.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00579 Published 2023-12-29 No fix listed CWE-1236

TI-2023-14972 CVE-2023-31293 · GHSA-jcjf-6r3f-3cjg

An issue was discovered in Sesami Cash Point & Transport Optimizer (CPTO) 6.3.8.6 (#718)…

LOW 21

An issue was discovered in Sesami Cash Point & Transport Optimizer (CPTO) 6.3.8.6 (#718), allows remote attackers to obtain sensitive information and bypass profile restriction via improper access control in the Reader s…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00474 Published 2023-12-29 No fix listed

TI-2023-14971 CVE-2023-31292 · GHSA-xch8-frxx-v8q6

An issue was discovered in Sesami Cash Point & Transport Optimizer (CPTO) 6.3.8.6 (#718)…

LOW 30

An issue was discovered in Sesami Cash Point & Transport Optimizer (CPTO) 6.3.8.6 (#718), allows local attackers to obtain sensitive information and bypass authentication via "Back Button Refresh" attack.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00172 Published 2023-12-29 No fix listed CWE-287

TI-2023-14976 CVE-2023-31297 · GHSA-pc49-g522-pmh5

An issue was discovered in SESAMI planfocus CPTO (Cash Point & Transport Optimizer)…

LOW 22

An issue was discovered in SESAMI planfocus CPTO (Cash Point & Transport Optimizer) 6.3.8.6 718.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.0031 Published 2023-12-25 No fix listed CWE-79

Vulnerabilities

Filters