Esoft Planner vulnerabilities

2 known vulnerabilities in Esoft Planner from Esoftplanner. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  planner: Improper Neutralization of Input During Web Page Generation

  CVE-2024-48536Nov 20, 2024Esoft

  Incorrect access control in eSoft Planner 3.24.08271-USA allow attackers to view all transactions performed by the company via supplying a crafted web request.

• 7.5 High severity

  planner: Allocation of Resources Without Limits or Throttling

  CVE-2024-48530Nov 20, 2024Esoft

  An issue in the Instructor Appointment Availability module of eSoft Planner 3.24.08271-USA allows attackers to cause a Denial of Service (DoS) via a crafted POST request.