Priority
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Portal Generator addon to Priority ERP (developed by Soft Solutions) | 9 | – | Aug 13, 2026 |
| Web | 5 | – | Dec 29, 2025 |
| Priority | 4 | – | Aug 20, 2024 |
| Priority Web | 2 | – | Feb 15, 2023 |
| PRI WEB Portal Add-On for Priority ERP on prem | 1 | – | Jul 30, 2024 |
| Priority for Windows | 1 | – | Feb 15, 2023 |
| PRI WEB | 1 | – | Dec 30, 2024 |
Exploited and recent CVEs
- CVE-2026-59507 Priority – CWE-798: Use of Hard-coded Credentials CWE-200: Exposure of Sensitive Information to an Unauthorized Actor CWE-284: Improper Access Control 0.3%
- CVE-2026-59506 Priority – CWE-306: Missing Authentication for Critical Function 0.4%
- CVE-2026-59505 Priority - CWE-284: Improper Access Control 0.4%
- CVE-2026-59504 Priority – CWE-602: Client-Side Enforcement of Server-Side Security 0.4%
- CVE-2026-59503 Priority – CWE-200: Exposure of Sensitive Information to an Unauthorized Actor CWE-359: Exposure of Private Personal Information to an Unauthorized Actor 0.4%
- CVE-2026-59502 Priority - CWE-203: Observable Discrepancy 0.3%
- CVE-2026-59501 Priority – CWE-284: Improper Access Control 0.3%
- CVE-2026-59500 Priority - CWE-287: Improper Authentication 0.5%
- CVE-2026-59499 Priority – CWE-200: Exposure of Sensitive Information to an Unauthorized Actor 0.4%
- CVE-2025-55064 Priority - CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') 0.2%
- CVE-2025-55063 Priority - CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') 0.2%
- CVE-2025-55062 Priority - CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') 0.2%
- CVE-2025-55061 Priority - CWE-434 Unrestricted Upload of File with Dangerous Type 0.3%
- CVE-2025-55060 Priority - CWE-601: URL Redirection to Untrusted Site ('Open Redirect') 0.2%
- CVE-2024-47922 Priority – CWE-200: Exposure of Sensitive Information to an Unauthorized Actor 0.5%
- CVE-2024-41699 Priority – CWE-552: Files or Directories Accessible to External Parties 0.3%
- CVE-2024-41698 Priority – CWE-200: Exposure of Sensitive Information to an Unauthorized Actor 0.3%
- CVE-2024-41697 Priority – CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) 0.3%
- CVE-2024-41696 Priority PRI WEB Portal Add-On for Priority ERP on prem – CWE-200: Exposure of Sensitive Information to an Unauthorized Actor 0.4%
- CVE-2023-23460 Priority Web – Authentication bypass 0.7%
- CVE-2023-23459 Priority Windows – Command Execution via SQL Injection 0.9%
- CVE-2022-23173 Priority - Priority web Insecure direct object references (IDOR) 0.6%
- CVE-2022-23172 Priority - Priority User Enumeration 0.5%