Ffullservices

Products

Exploited and recent CVEs

• CVE-2024-12023 Medium 6.5 FULL – Cliente 3.1.5 - 3.1.25 - Authenticated (Subscriber+) SQL Injection 0.4%
• CVE-2024-9211 Medium 6.1 FULL – Cliente <= 3.1.22 - Reflected Cross-Site Scripting 0.4%
• CVE-2024-6447 High 7.2 FULL <= 3.1.12 - Unauthenticated Stored Cross-Site Scripting via License Plan Parameter 0.5%
• CVE-2023-4242 Medium 4.3 FULL - Customer <= 2.2.3 - Authenticated(Subscriber+) Information Disclosure via Health Check 0.5%
• CVE-2023-4243 High 8.8 FULL - Customer <= 2.2.3 - Authenticated(Subscriber+) Improper Authorization to Arbitrary Plugin Installation 0.9%