Priority

Products

ProductCVEsExploitedLatest
Portal Generator addon to Priority ERP (developed by Soft Solutions)9–Aug 13, 2026
Web5–Dec 29, 2025
Priority4–Aug 20, 2024
Priority Web2–Feb 15, 2023
PRI WEB Portal Add-On for Priority ERP on prem1–Jul 30, 2024
Priority for Windows1–Feb 15, 2023
PRI WEB1–Dec 30, 2024

Exploited and recent CVEs

  • CVE-2026-59507 Critical 9.3 Priority – CWE-798: Use of Hard-coded Credentials CWE-200: Exposure of Sensitive Information to an Unauthorized Actor CWE-284: Improper Access Control 0.3%
  • CVE-2026-59506 Critical 9.3 Priority – CWE-306: Missing Authentication for Critical Function 0.4%
  • CVE-2026-59505 High 8.6 Priority - CWE-284: Improper Access Control 0.4%
  • CVE-2026-59504 Critical 9.1 Priority – CWE-602: Client-Side Enforcement of Server-Side Security 0.4%
  • CVE-2026-59503 Critical 9.1 Priority – CWE-200: Exposure of Sensitive Information to an Unauthorized Actor CWE-359: Exposure of Private Personal Information to an Unauthorized Actor 0.4%
  • CVE-2026-59502 Medium 5.3 Priority - CWE-203: Observable Discrepancy 0.3%
  • CVE-2026-59501 High 8.2 Priority – CWE-284: Improper Access Control 0.3%
  • CVE-2026-59500 Critical 10.0 Priority - CWE-287: Improper Authentication 0.5%
  • CVE-2026-59499 High 8.6 Priority – CWE-200: Exposure of Sensitive Information to an Unauthorized Actor 0.4%
  • CVE-2025-55064 Medium 4.8 Priority - CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') 0.2%
  • CVE-2025-55063 Medium 4.8 Priority - CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') 0.2%
  • CVE-2025-55062 Medium 4.8 Priority - CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') 0.2%
  • CVE-2025-55061 High 8.8 Priority - CWE-434 Unrestricted Upload of File with Dangerous Type 0.3%
  • CVE-2025-55060 Medium 6.1 Priority - CWE-601: URL Redirection to Untrusted Site ('Open Redirect') 0.2%
  • CVE-2024-47922 High 7.5 Priority – CWE-200: Exposure of Sensitive Information to an Unauthorized Actor 0.5%
  • CVE-2024-41699 Medium 4.4 Priority – CWE-552: Files or Directories Accessible to External Parties 0.3%
  • CVE-2024-41698 Medium 4.3 Priority – CWE-200: Exposure of Sensitive Information to an Unauthorized Actor 0.3%
  • CVE-2024-41697 Medium 6.1 Priority – CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) 0.3%
  • CVE-2024-41696 High 7.5 Priority PRI WEB Portal Add-On for Priority ERP on prem – CWE-200: Exposure of Sensitive Information to an Unauthorized Actor 0.4%
  • CVE-2023-23460 Critical 9.1 Priority Web – Authentication bypass 0.7%
  • CVE-2023-23459 Critical 9.1 Priority Windows – Command Execution via SQL Injection 0.9%
  • CVE-2022-23173 Medium 5.5 Priority - Priority web Insecure direct object references (IDOR) 0.6%
  • CVE-2022-23172 Medium 5.5 Priority - Priority User Enumeration 0.5%