Unit4 vulnerabilities

Products

• Mik.starlight 4
• Teta Web 2

Newest

• unit4 financials by coda, coda unit 4 financials +1 more An incorrect access control issue in Unit4 Financials by Coda v.2023Q4 allows a remote attacker... CVE-2024-28735 8.1 HighMarch 20, 2024
• unit4 financials Cross Site Scripting vulnerability in Unit4 Financials by Coda v.2024Q1 allows a remote attacker... CVE-2024-28734 6.1 MediumMarch 19, 2024
• unit4 enterprise resource planning Unit4 ERP through 7.9 allows XXE via ExecuteServerProcessAsynchronously. CVE-2022-34001 6.5 MediumJuly 19, 2022
• unit4 teta UNIT4 TETA Mobile Edition (ME) before 29.5.HF17 was discovered to contain a SQL injection... CVE-2022-27434 Public exploit 9.8 CriticalJuly 17, 2022
• unit4 mik.starlight The function AdminGetFirstFileContentByFilePath in MIK.starlight 7.9.5.24363 allows (by design)... CVE-2021-36233 6.5 MediumAugust 31, 2021
• unit4 mik.starlight Use of a hard-coded cryptographic key in MIK.starlight 7.9.5.24363 allows local users to decrypt... CVE-2021-36234 5.5 MediumAugust 31, 2021
• unit4 mik.starlight Deserialization of untrusted data in multiple functions in MIK.starlight 7.9.5.24363 allows... CVE-2021-36231 8.8 HighAugust 31, 2021
• unit4 mik.starlight Improper Authorization in multiple functions in MIK.starlight 7.9.5.24363 allows an authenticated... CVE-2021-36232 8.8 HighAugust 31, 2021
• unit4 teta web Session fixation vulnerability in Unit4 Polska TETA Web (formerly TETA Galactica) 22.62.3.4 and... CVE-2015-1174 9.8 CriticalAugust 2, 2017
• unit4 teta web Unit4 Polska TETA Web (formerly TETA Galactica) 22.62.3.4 does not properly restrict access to... CVE-2015-1173 7.5 HighSeptember 16, 2015
• unit4 prosoft hrms Cross-site scripting (XSS) vulnerability in Login.aspx in UNIT4 Prosoft HRMS before 8.14.330.43... CVE-2015-2082 4.3 MediumFebruary 25, 2015