CyberSecBulletin

Aremis vulnerabilities

We track 2 vulnerabilities in Aremis products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on February 27, 2023.

2vulnerabilities
1critical
1high
0exploited
8.3average CVSS score

Latest Aremis vulnerabilities

  • 9.1 Critical severity

    Aremis 4 Nomads: Improper Neutralization of Special Elements used in an SQL Command

    CVE-2022-34909Aremis

    An issue was discovered in the A4N (Aremis 4 Nomad) application 1.5.0 for Android. It allows SQL Injection, by which an attacker can bypass authentication and retrieve data that is stored in the database.

  • 7.5 High severity

    Aremis 4 Nomads: Improper Authentication

    CVE-2022-34908Aremis

    An issue was discovered in the A4N (Aremis 4 Nomad) application 1.5.0 for Android. It possesses an authentication mechanism; however, some features do not require any token or cookie in a request. Therefore, an attacker may send a simple HTTP request to the ri