CVE-2020-24663

The CVE-2020-24663 entry applies to Trace Financial CRESTBridge prior to version 6.3.0.03, which contains a stored XSS vulnerability in CRESTBridge

CVE-2020-24667

CVE-2020-24667 affects Trace Financial CRESTBridge prior to 6.3.0.03, with an authenticated SQL injection vulnerability discovered in versions <6.3.0.03. The issue is fixed in 6.3.0.03. Connected sources (Red Hat, CNVD, CVE listings) confirm CRESTBridge

CVE-2020-24671

Trace Financial CRESTBridge prior to v6.3.0.02 suffers an authenticated SQL injection due to insufficient input validation. The issue allows an attacker with valid credentials to manipulate SQL statements, potentially impacting data confidentiality, integrity, and availability as described in the...