Unit4 Financials by Coda Security Breaches

Unit4 Financials by Coda is a financial management software from Unit4 USA. A security vulnerability exists in versions of Unit4 Financials by Coda prior to 2023Q4 that stems from the presence of incorrect access controls...

Financials By Coda Cross Site Scripting

Vulnerability type: Cross-site Scripting Vendor: https://www.unit4.com/ Product: Financials by Coda Product site: https://www.unit4.com/fr/products/financial-management-software Affected version: HTTP/2 Host: TIMELINE – 30/10/2023: Vulnerability found – 02/11/2023: Vendor informed – 05/12/2023:...

Financials By Coda Authorization Bypass

Vulnerability type: Incorrect Access Control Vendor: https://www.unit4.com/ Product: Financials by Coda Product site: https://www.unit4.com/fr/products/financial-management-software Affected version: "user" : "", "password" : "", "company" : "", "newPassword" : "newpasswordfortargeteduser",...

CVE-2022-34001

Unit4 ERP through 7.9 allows XXE via ExecuteServerProcessAsynchronously...

CVE-2022-34001

Unit4 ERP through 7.9 allows XXE via ExecuteServerProcessAsynchronously...

CVE-2022-34001

Unit4 ERP through 7.9 allows XXE via ExecuteServerProcessAsynchronously...

Design/Logic Flaw

Unit4 ERP through 7.9 allows XXE via ExecuteServerProcessAsynchronously...

CVE-2022-34001

Unit4 ERP (up to v7.9) is affected by a XXE vulnerability in the ExecuteServerProcessAsynchronously path. The root cause is an XML External Entity injection in that component, enabling potential disclosure of sensitive data via network-exposed input. Public details in connected sources confirm th...

CVE-2022-34001

Unit4 ERP through 7.9 allows XXE via ExecuteServerProcessAsynchronously...

Unit4 ERP 代码问题漏洞

Unit4 ERP is an enterprise-class resource management platform from Unit4, Inc. A security vulnerability exists in Unit4 ERP 7.9 and prior versions that originates from an XXE attack allowed via Execute Server Process Asynchronously...

CVE-2022-27434

UNIT4 TETA Mobile Edition ME before 29.5.HF17 was discovered to contain a SQL injection vulnerability via the ProfileName parameter in the errorReporting page...

CVE-2022-27434

UNIT4 TETA Mobile Edition ME before 29.5.HF17 was discovered to contain a SQL injection vulnerability via the ProfileName parameter in the errorReporting page...

Sql injection

UNIT4 TETA Mobile Edition ME before 29.5.HF17 was discovered to contain a SQL injection vulnerability via the ProfileName parameter in the errorReporting page...

CVE-2022-27434

UNIT4 TETA Mobile Edition ME before 29.5.HF17 was discovered to contain a SQL injection vulnerability via the ProfileName parameter in the errorReporting page...

CVE-2022-27434

UNIT4 TETA Mobile Edition (ME) prior to 29.5.HF17 contains a SQL injection in the errorReporting page via the ProfileName parameter. Affected product: UNIT4 TETA Mobile Edition (ME). Root cause: improper handling of the ProfileName input enabling SQL injection. Impact per CVSS: high confidentiali...

Session fixation

Session fixation vulnerability in Unit4 Polska TETA Web formerly TETA Galactica 22.62.3.4 and earlier allows remote attackers to hijack web sessions via a session id...

CVE-2015-1174

Session fixation vulnerability in Unit4 Polska TETA Web formerly TETA Galactica 22.62.3.4 and earlier allows remote attackers to hijack web sessions via a session id...

CVE-2015-1174

Session fixation vulnerability in Unit4 Polska TETA Web formerly TETA Galactica 22.62.3.4 and earlier allows remote attackers to hijack web sessions via a session id...

CVE-2015-1174

CVE-2015-1174 affects Unit4 Polska TETA Web (formerly TETA Galactica) up to version 22.62.3.4. The vulnerability is a session fixation flaw that allows a remote attacker to hijack a user’s web session by manipulating the session identifier. The CNVD entry corroborates the affected software and vu...

Unit4 Polska TETA Web Authorization Bypass Vulnerability

Unit4 Polska TETA Web formerly known as TETA Galactica is a package of solutions including personnel, financial and logistics management systems from Unit4 Poland. An authorization bypass vulnerability exists in Unit4 Polska TETA Web version 22.62.3.4. Due to the program failing to properly...