Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

11 records

Vendor: Utarit Informatics Services Inc. Clear all filters
TI-2025-00872 CVE-2025-1031 · GHSA-h9jv-6gv7-xp9q

IDOR in Utarit Informatics' SoliClub

Priority LOW 39

Authorization Bypass Through User-Controlled Key vulnerability in Utarit Informatics Services Inc.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00304 Published 2025-12-18 Fixed in 5.3.7 CWE-639
TI-2025-00871 CVE-2025-1030 · GHSA-ppgf-6v2c-6ggr

Sensitive Data Exposure in Utarit Informatics' SoliClub

Priority LOW 39

Exposure of Private Personal Information to an Unauthorized Actor vulnerability in Utarit Informatics Services Inc.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00302 Published 2025-12-18 Fixed in 5.3.7 CWE-359
TI-2024-03099 CVE-2024-3306 · GHSA-rfvq-f6wq-mfhj

IDOR in Utarit Information's SoliClub

Priority MEDIUM 44

Authorization Bypass Through User-Controlled Key vulnerability in Utarit Information SoliClub allows Exploiting Incorrectly Configured Access Control Security Levels.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00357 Published 2024-09-12 Fixed in 4.4.0, 5.2.1 CWE-639
TI-2024-03098 CVE-2024-3305 · GHSA-375w-qxcp-h82p

IDOR in Utarit Information's SoliClub

Priority MEDIUM 44

Authorization Bypass Through User-Controlled Key, Missing Authorization vulnerability in Utarit Information SoliClub allows Retrieve Embedded Sensitive Data.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00385 Published 2024-09-12 Fixed in 4.4.0, 5.2.1 CWE-639
TI-2023-05746 CVE-2023-6255 · GHSA-w2r7-j937-rrj3

Hardcoded Credentals in SoliClub Mobile App

Priority LOW 39

Use of Hard-coded Credentials vulnerability in Utarit Information Technologies SoliPay Mobile App allows Read Sensitive Strings Within an Executable.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00448 Published 2024-02-15 Fixed in 5.0.8 CWE-798
TI-2023-04743 CVE-2023-5155 · GHSA-2vv9-3gf2-vjx5

SQLi in Utarit's Smart Deposit System

Priority MEDIUM 49

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Utarit Information Technologies SoliPay Mobile App allows SQL Injection.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00519 Published 2024-02-15 Fixed in 5.0.8 CWE-89
TI-2023-04596 CVE-2023-4993 · GHSA-jhxj-w2j8-p3gf

Sensetive Data Exposure in Utarit's Soliclub

Priority LOW 39

Incorrect Use of Privileged APIs vulnerability in Utarit Information Technologies SoliPay Mobile App allows Collect Data as Provided by Users.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00448 Published 2024-02-15 Fixed in 5.0.8 CWE-648
TI-2023-01090 CVE-2023-1152 · GHSA-mwfw-j98c-gjhg

SQLi in Utarit Persolus

Priority MEDIUM 44

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Utarit Information Technologies Persolus allows SQL Injection.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0062 Published 2023-03-17 Fixed in 2.03.93 CWE-89