Vendor/product archive

ordat / ordat.erp CVEs

Beta · best-effort

3 CVEs tagged to ordat / ordat.erp — 0 Critical, 1 High, 2 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to ordat vendor archive

CVE-2024-34336

Published Sep 12, 2024

User enumeration vulnerability in ORDAT FOSS-Online before v2.24.01 allows attackers to determine if an account exists in the application by comparing the server responses of the…

CVSS 5.3 · Medium

Vendor/product tagsBeta · best-effort

CVE-2024-34335

Published Sep 12, 2024

ORDAT FOSS-Online before version 2.24.01 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the login page.

CVSS 6.1 · Medium

Vendor/product tagsBeta · best-effort

CVE-2024-34334

Published Sep 12, 2024

ORDAT FOSS-Online before v2.24.01 was discovered to contain a SQL injection vulnerability via the forgot password function.

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

Showing 1-3 of 3 CVEsPage 1 of 1