CVE-2024-38889

Horizon Business Services Inc. Caterease versions 16.0.1.1663 through 24.0.1.2405 (and possibly later) are affected by CVE-2024-38889 due to improper neutralization of SQL elements, enabling remote SQL Injection. The issue is documented across multiple sources (NVD/Red Hat/CVE lists and PT Securi...

CVE-2024-38886

The CVE-2024-38886 entry concerns Horizon Business Services Inc. Caterease versions 16.0.1.1663 through 24.0.1.2405 (and possibly later versions). A remote attacker can perform a Traffic Injection attack due to improper verification of the source of a communication channel. The NVD/CNA records ra...

CVE-2024-38882

The Horizon Business Services Inc. Caterease software (versions 16.0.1.1663 through 24.0.1.2405 and possibly later) is vulnerable to remote command line execution . The root cause is an SQL Injection vulnerability resulting from the improper neutralization of special elements used in an OS comman...

CVE-2024-38888

Horizon Business Services Inc. Caterease (versions 16.0.1.1663 through 24.0.1.2405 and possibly later) is vulnerable to a Password Brute Forcing attack. The root cause is the software's failure to properly restrict excessive authentication attempts , which allows a local attacker to systematicall...

CVE-2024-38884: Incorrect Authorization

An issue in Horizon Business Services Inc. Caterease 16.0.1.1663 through 24.0.1.2405 and possibly later versions, allows a local attacker to perform an Authentication Bypass attack due to improperly implemented security checks for standard authentication mechanisms...

CVE-2024-38881

An issue in Horizon Business Services Inc. Caterease 16.0.1.1663 through 24.0.1.2405 and possibly later versions, allows a remote attacker to perform a Rainbow Table Password cracking attack due to the use of one-way hashes without salts when storing user passwords...

CVE-2024-38888: Improper Restriction of Excessive Authentication Attempts

An issue in Horizon Business Services Inc. Caterease 16.0.1.1663 through 24.0.1.2405 and possibly later versions, allows a local attacker to perform a Password Brute Forcing attack due to improper restriction of excessive authentication attempts...

CVE-2024-38885

An issue in Horizon Business Services Inc. Caterease 16.0.1.1663 through 24.0.1.2405 and possibly later versions, allows a remote attacker to perform unauthorized access using known operating system credentials due to hardcoded SQL user credentials in the client application...

CVE-2024-38885: Use of Hard-coded Password

An issue in Horizon Business Services Inc. Caterease 16.0.1.1663 through 24.0.1.2405 and possibly later versions, allows a remote attacker to perform unauthorized access using known operating system credentials due to hardcoded SQL user credentials in the client application...

CVE-2024-38882: Improper Neutralization of Special Elements used in an OS Command

An issue in Horizon Business Services Inc. Caterease 16.0.1.1663 through 24.0.1.2405 and possibly later versions, allows a remote attacker to perform command line execution through SQL Injection due to improper neutralization of special elements used in an OS command...

CVE-2024-38881

An issue in Horizon Business Services Inc. Caterease 16.0.1.1663 through 24.0.1.2405 and possibly later versions, allows a remote attacker to perform a Rainbow Table Password cracking attack due to the use of one-way hashes without salts when storing user passwords...