Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: SFS Consulting Clear all filters
TI-2024-05942 CVE-2024-6401 · GHSA-hg4p-55w9-888w

SQLi in SFS Consulting's InsureE GL

Priority MEDIUM 42

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in SFS Consulting InsureE GL allows SQL Injection.

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.0042 Published 2024-09-16 Fixed in 4.6.2 CWE-89
TI-2024-06579 CVE-2024-7104 · GHSA-w784-6hh8-995v

Remote Code Execution in SFS Consulting's ww.Winsure

Priority MEDIUM 42

Improper Control of Generation of Code ('Code Injection') vulnerability in SFS Consulting ww.Winsure allows Code Injection.

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.00507 Published 2024-09-16 Fixed in 4.6.2 CWE-94
TI-2024-06573 CVE-2024-7098 · GHSA-rh54-7qq9-x5v8

XML Injection in SFS Consulting's ww.Winsure

Priority MEDIUM 42

Improper Restriction of XML External Entity Reference vulnerability in SFS Consulting ww.Winsure allows XML Injection.

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.00485 Published 2024-09-16 Fixed in 4.6.2 CWE-611