EUVD-2022-37034

Malicious code in bioql PyPI...

CVE-2022-34001

Unit4 ERP through 7.9 allows XXE via ExecuteServerProcessAsynchronously...

CVE-2022-34001

Unit4 ERP through 7.9 allows XXE via ExecuteServerProcessAsynchronously...

CVE-2022-34001

Unit4 ERP through 7.9 allows XXE via ExecuteServerProcessAsynchronously...

CVE-2022-34001

Unit4 ERP through 7.9 allows XXE via ExecuteServerProcessAsynchronously...

Design/Logic Flaw

Unit4 ERP through 7.9 allows XXE via ExecuteServerProcessAsynchronously...

CVE-2022-34001

Unit4 ERP through 7.9 allows XXE via ExecuteServerProcessAsynchronously...

Unit4 ERP code-related vulnerabilities

Unit4 ERP is an enterprise-class resource management platform from Unit4, Inc. A security vulnerability exists in Unit4 ERP 7.9 and prior versions that originates from an XXE attack allowed via Execute Server Process Asynchronously...

CVE-2022-34001: Improper Restriction of XML External Entity Reference

Unit4 ERP through 7.9 allows XXE via ExecuteServerProcessAsynchronously...

PT-2022-21961

Name of the Vulnerable Software and Affected Versions Unit4 ERP versions through 7.9 Description The issue allows XXE XML External Entity attacks via the ExecuteServerProcessAsynchronously function. This can potentially lead to unauthorized access to sensitive data. Recommendations For versions...