CVE-2023-4665 Privilage Escalation in Saphira Connect

Incorrect Execution-Assigned Permissions vulnerability in Saphira Saphira Connect allows Privilege Escalation. This issue affects Saphira Connect: before 9...

CVE-2023-4664

CVE-2023-4664 affects Saphira Connect prior to version 9. The root cause described across connected sources is incorrect default permissions that enable privilege escalation. Impact is reported as high (confidentiality, integrity, and availability affected) with network attack vector and low atta...

CVE-2023-4664 Privilage Escalation in Saphira Connect

Incorrect Default Permissions vulnerability in Saphira Saphira Connect allows Privilege Escalation. This issue affects Saphira Connect: before 9...

CVE-2023-4663 XSS in Saphira Connect

Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in Saphira Saphira Connect allows Reflected XSS. This issue affects Saphira Connect: before 9...

CVE-2023-4663

CVE-2023-4663 concerns a reflected XSS vulnerability in Saphira Connect prior to version 9. The issue is caused by improper neutralization of script-related HTML tags in web pages, enabling potential script execution in a user browser when interacting with affected pages. The CVSS data (AV:N/AC:L...

CVE-2023-4663 XSS in Saphira Connect

Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in Saphira Saphira Connect allows Reflected XSS. This issue affects Saphira Connect: before 9...

CVE-2023-4662 RCE in Saphira Connect

Execution with Unnecessary Privileges vulnerability in Saphira Saphira Connect allows Remote Code Inclusion. This issue affects Saphira Connect: before 9...

CVE-2023-4662

CVE-2023-4662 involves an Execution with Unnecessary Privileges vulnerability in Saphira Connect (mobile app for Saphira Connect, Inc.). The issue affects versions prior to 9 and enables a Remote Code Inclusion vulnerability due to insufficient privilege checks. Public sources describe potential ...

CVE-2023-4662 RCE in Saphira Connect

Execution with Unnecessary Privileges vulnerability in Saphira Saphira Connect allows Remote Code Inclusion. This issue affects Saphira Connect: before 9...

CVE-2023-4661 SQLi in Saphira Connect

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Saphira Saphira Connect allows SQL Injection. This issue affects Saphira Connect: before 9...

CVE-2023-4661 SQLi in Saphira Connect

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Saphira Saphira Connect allows SQL Injection. This issue affects Saphira Connect: before 9...

CVE-2023-4661

CVE-2023-4661 affects Saphira Connect versions prior to 9, due to improper neutralization of certain elements in SQL commands (SQL injection). The vulnerability is characterized as a high-severity, network-exploitable issue with a CVSS v3.1 base score of 9.8 (C:H, I:H, A:H; AV:N, AC:L, PR:N, UI:N...

CVE-2023-4665: Incorrect Execution-Assigned Permissions

Incorrect Execution-Assigned Permissions vulnerability in Saphira Saphira Connect allows Privilege Escalation. This issue affects Saphira Connect: before 9...

PT-2023-30110 · Unknown · Saphira Connect

Name of the Vulnerable Software and Affected Versions: Saphira Connect versions prior to 9 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks. Recommendations: For...

PT-2023-30131

Name of the Vulnerable Software and Affected Versions Saphira Connect versions prior to 9 Description The issue is related to incorrect default permissions in Saphira Connect, allowing privilege escalation. Recommendations For versions prior to 9, update to version 9 or later to resolve the issue...

CVE-2023-4662: Execution with Unnecessary Privileges

Execution with Unnecessary Privileges vulnerability in Saphira Saphira Connect allows Remote Code Inclusion. This issue affects Saphira Connect: before 9...

CVE-2023-4663: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in Saphira Saphira Connect allows Reflected XSS. This issue affects Saphira Connect: before 9...

CVE-2023-4661: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Saphira Saphira Connect allows SQL Injection. This issue affects Saphira Connect: before 9...

Saphira Connect Cross-Site Scripting Vulnerability

Saphira Connect is a telephone exchange and call center server mobile application from Saphira Connect, Inc. A cross-site scripting vulnerability exists in versions prior to Saphira Connect 9 that stems from incorrect default permissions that allow privilege escalation...

CVE-2023-4664: Incorrect Default Permissions

Incorrect Default Permissions vulnerability in Saphira Saphira Connect allows Privilege Escalation. This issue affects Saphira Connect: before 9...