CVE-2025-6078: Undefined Security Weakness

Partner Software's Partner Software application and Partner Web application allows an authenticated user to add notes on the 'Notes' page when viewing a job but does not completely sanitize input, making it possible to add notes with HTML tags and JavaScript, enabling an attacker to add a note...

CVE-2025-6076: Undefined Security Weakness

Partner Software's Partner Software application and Partner Web application do not sanitize files uploaded on the "reports" tab, allowing an authenticated attacker to upload a malicious file and compromise the device. By default, the software runs as SYSTEM, heightening the severity of the...

CVE-2025-6077: Use of Weak Credentials

Partner Software's Partner Software Product and corresponding Partner Web application use the same default username and password for the administrator account across all versions...