Priority - vulnerabilities (CVEs)

23 CVEs in 8 products, 0 in the last 30 days, newest from 2026-08-13.

Products

• Portal Generator Addon To Priority Erp Developed By Soft Solutions - 8 CVEs
• Web - 5 CVEs
• Priority - 4 CVEs
• Priority Web - 2 CVEs
• Portal Generator Addon To Priority Erp Developed By Soft Solutions. - 1 CVEs
• Pri Web - 1 CVEs
• Pri Web Portal Add-on For Priority Erp On Prem - 1 CVEs
• Priority For Windows - 1 CVEs

Newest CVEs of Priority

• CVE-2026-59507 - CVSS 9.3 (critical), 2026-08-13: : Use of Hard-coded Credentials : Exposure of Sensitive Information to an Unauthorized Actor : Improper Access Control vulnerability in Priority Portal…
• CVE-2026-59506 - CVSS 9.3 (critical), 2026-08-13: : Missing Authentication for Critical Function vulnerability in Priority Portal Generator addon to Priority ERP (developed by Soft Solutions). This issue…
• CVE-2026-59505 - CVSS 8.6 (high), 2026-08-13: : Improper Access Control vulnerability in Priority Portal Generator addon to Priority ERP (developed by Soft Solutions). This issue affects Portal Generator…
• CVE-2026-59504 - CVSS 9.1 (critical), 2026-08-13: : Client-Side Enforcement of Server-Side Security vulnerability in Priority Portal Generator addon to Priority ERP (developed by Soft Solutions). This issue…
• CVE-2026-59503 - CVSS 9.1 (critical), 2026-08-13: : Exposure of Sensitive Information to an Unauthorized Actor : Exposure of Private Personal Information to an Unauthorized Actor vulnerability in Priority…
• CVE-2026-59502 - CVSS 5.3 (medium), 2026-08-13: : Observable Discrepancy vulnerability in Priority Portal Generator addon to Priority ERP (developed by Soft Solutions). This issue affects Portal Generator…
• CVE-2026-59501 - CVSS 8.2 (high), 2026-08-13: : Improper Access Control vulnerability in Priority Portal Generator addon to Priority ERP (developed by Soft Solutions). This issue affects Portal Generator…
• CVE-2026-59500 - CVSS 10 (critical), 2026-08-13: : Improper Authentication vulnerability in Priority Portal Generator addon to Priority ERP (developed by Soft Solutions). This issue affects Portal Generator…
• CVE-2026-59499 - CVSS 8.6 (high), 2026-08-13: : Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Priority Portal Generator addon to Priority ERP (developed by Soft Solutions)..…
• CVE-2025-55064 - CVSS 4.8 (medium), 2025-12-29: CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')
• CVE-2025-55063 - CVSS 4.8 (medium), 2025-12-29: CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')
• CVE-2025-55062 - CVSS 4.8 (medium), 2025-12-29: CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')
• CVE-2025-55061 - CVSS 8.8 (high), 2025-12-29: CWE-434 Unrestricted Upload of File with Dangerous Type
• CVE-2025-55060 - CVSS 6.1 (medium), 2025-12-29: CWE-601 URL Redirection to Untrusted Site ('Open Redirect')
• CVE-2024-47922 - CVSS 7.5 (high), 2024-12-30: Priority – CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
• CVE-2024-41699 - CVSS 7.5 (high), 2024-08-20: Priority – CWE-552: Files or Directories Accessible to External Parties
• CVE-2024-41698 - CVSS 7.5 (high), 2024-08-20: Priority – CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
• CVE-2024-41697 - CVSS 6.1 (medium), 2024-08-20: Priority - CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
• CVE-2024-41696 - CVSS 7.5 (high), 2024-07-30: Priority PRI WEB Portal Add-On for Priority ERP on prem - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
• CVE-2023-23459 - CVSS 9.8 (critical), 2023-02-15: Priority Windows may allow Command Execution via SQL Injection using an unspecified method.
• CVE-2023-23460 - CVSS 9.8 (critical), 2023-02-15: Priority Web version 19.1.0.68, parameter manipulation on an unspecified end-point may allow authentication bypass.
• CVE-2022-23172 - CVSS 5.5 (medium), 2022-07-06: An attacker can access to "Forgot my password" button, as soon as he puts users is valid in the system, the system would issue a message that a password reset…
• CVE-2022-23173 - CVSS 6.3 (medium), 2022-07-06: this vulnerability affect user that even not allowed to access via the web interface. First of all, the attacker needs to access the "Login menu - demo site"…