Business-DNA Solutions GmbH

Products

ProductCVEsExploitedLatest
TopEase11–Nov 30, 2021

Exploited and recent CVEs

  • CVE-2021-42545 High 8.1 Insufficient Session Expiration in TopEase 1.1%
  • CVE-2021-42123 High 7.3 Missing Upload Filter in TopEase 1.1%
  • CVE-2021-42544 High 7.5 Lack of Rate limiting in Authentication in TopEase 1.4%
  • CVE-2021-42122 Medium 4.3 Denial of Service via Invalid Object Attribute in TopEase 0.8%
  • CVE-2021-42121 Medium 4.3 Denial of Service via Invalid Date Format in TopEase 1.0%
  • CVE-2021-42120 Medium 6.5 Missing Character Length (Denial of Service) in TopEase 1.1%
  • CVE-2021-42119 High 7.3 Stored XSS in Search Function in TopEase 0.5%
  • CVE-2021-42118 High 8.1 Stored XSS in TopEase 0.7%
  • CVE-2021-42117 Low 3.5 UI Redressing in TopEase 0.7%
  • CVE-2021-42116 Medium 4.3 Unauthorized Menu Item Access in TopEase 0.8%
  • CVE-2021-42115 High 8.1 Missing HTTPOnly flag on sensitive cookie in TopEase 1.3%