NA - CVE-2024-36499 - Vulnerability of unauthorized screenshot...
Vulnerability of unauthorized screenshot capturing in the WMS module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
NA - CVE-2024-5464 - Vulnerability of insufficient permission...
Vulnerability of insufficient permission verification in the NearLink module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
NA - CVE-2024-5961 - Improper neutralization of input during web...
Improper neutralization of input during web page generation vulnerability in 2ClickPortal software allows reflected cross-site scripting (XSS). An attacker might trick somebody into using a crafted...
High - CVE-2024-5995 - The notification emails sent by Soar Cloud HR...
The notification emails sent by Soar Cloud HR Portal contain a link with a embedded session. The expiration of the session is not properly configured, remaining valid for more than 7 days and can...