EUVD-2022-37034

Malicious code in bioql PyPI...

CVE-2022-34001

Unit4 ERP through 7.9 allows XXE via ExecuteServerProcessAsynchronously...

CVE-2022-34001

Unit4 ERP through 7.9 allows XXE via ExecuteServerProcessAsynchronously...

CVE-2022-34001

Unit4 ERP (up to v7.9) is affected by a XXE vulnerability in the ExecuteServerProcessAsynchronously path. The root cause is an XML External Entity injection in that component, enabling potential disclosure of sensitive data via network-exposed input. Public details in connected sources confirm th...

CVE-2022-34001: Improper Restriction of XML External Entity Reference

Unit4 ERP through 7.9 allows XXE via ExecuteServerProcessAsynchronously...

PT-2022-21961

Name of the Vulnerable Software and Affected Versions Unit4 ERP versions through 7.9 Description The issue allows XXE XML External Entity attacks via the ExecuteServerProcessAsynchronously function. This can potentially lead to unauthorized access to sensitive data. Recommendations For versions...