Priority (Priority-software) - vulnerabilities (CVEs)

7 CVEs, 0 in the last 30 days, 3 known versions, newest CVE from 2024-08-20. Vendor: Priority-software.

CVEs of Priority

• CVE-2024-41699 - CVSS 7.5 (high), 2024-08-20: Priority – CWE-552: Files or Directories Accessible to External Parties
• CVE-2024-41698 - CVSS 7.5 (high), 2024-08-20: Priority – CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
• CVE-2024-41697 - CVSS 6.1 (medium), 2024-08-20: Priority - CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
• CVE-2023-23460 - CVSS 9.8 (critical), 2023-02-15: Priority Web version 19.1.0.68, parameter manipulation on an unspecified end-point may allow authentication bypass.
• CVE-2023-23459 - CVSS 9.8 (critical), 2023-02-15: Priority Windows may allow Command Execution via SQL Injection using an unspecified method.
• CVE-2022-23173 - CVSS 6.3 (medium), 2022-07-06: this vulnerability affect user that even not allowed to access via the web interface. First of all, the attacker needs to access the "Login menu - demo site"…
• CVE-2022-23172 - CVSS 5.5 (medium), 2022-07-06: An attacker can access to "Forgot my password" button, as soon as he puts users is valid in the system, the system would issue a message that a password reset…