Horizoncloud vulnerabilities
We track 10 vulnerabilities in Horizoncloud products. 10 are rated high or critical, and none are known to be exploited. The most recent was published on August 2, 2024.
Latest Horizoncloud vulnerabilities
- 7.5 High severity
caterease: Cleartext Transmission of Sensitive Information
An issue in Horizon Business Services Inc. Caterease 16.0.1.1663 through 24.0.1.2405 and possibly later versions, allows a remote attacker to perform a Sniffing Network Traffic attack due to the cleartext transmission of sensitive information.
- 9.8 Critical severity
caterease: Improper Neutralization of Special Elements used in an OS Command
An issue in Horizon Business Services Inc. Caterease 16.0.1.1663 through 24.0.1.2405 and possibly later versions, allows a remote attacker to expand control over the operating system from the database due to the execution of commands with unnecessary privilege
- 9.8 Critical severity
caterease: Improper Neutralization of Special Elements used in an SQL Command
An issue in Horizon Business Services Inc. Caterease 16.0.1.1663 through 24.0.1.2405 and possibly later versions, allows a remote attacker to perform SQL Injection due to improper neutralization of special elements used in an SQL command.
- 9.8 Critical severity
caterease: Improper Verification of Source of a Communication Channel
An issue in Horizon Business Services Inc. Caterease 16.0.1.1663 through 24.0.1.2405 and possibly later versions, allows a remote attacker to perform a Traffic Injection attack due to improper verification of the source of a communication channel.
- 7.5 High severity
caterease: Use of Hard-coded Password
An issue in Horizon Business Services Inc. Caterease 16.0.1.1663 through 24.0.1.2405 and possibly later versions, allows a remote attacker to perform unauthorized access using known operating system credentials due to hardcoded SQL user credentials in the clie
- 7.8 High severity
caterease: Incorrect Authorization
An issue in Horizon Business Services Inc. Caterease 16.0.1.1663 through 24.0.1.2405 and possibly later versions, allows a local attacker to perform an Authentication Bypass attack due to improperly implemented security checks for standard authentication mecha
- 9.1 Critical severity
caterease: Selection of Less-Secure Algorithm During Negotiation
An issue in Horizon Business Services Inc. Caterease 16.0.1.1663 through 24.0.1.2405 and possibly later versions, allows a remote attacker to perform a Drop Encryption Level attack due to the selection of a less-secure algorithm during negotiation.
- 9.8 Critical severity
caterease: Improper Neutralization of Special Elements used in an OS Command
An issue in Horizon Business Services Inc. Caterease 16.0.1.1663 through 24.0.1.2405 and possibly later versions, allows a remote attacker to perform command line execution through SQL Injection due to improper neutralization of special elements used in an OS
- 7.5 High severity
caterease: Use of a One-Way Hash with a Predictable Salt
An issue in Horizon Business Services Inc. Caterease 16.0.1.1663 through 24.0.1.2405 and possibly later versions, allows a remote attacker to perform a Rainbow Table Password cracking attack due to the use of one-way hashes without salts when storing user pass
- 8.4 High severity
caterease: Authentication Bypass by Capture-replay
An issue in Horizon Business Services Inc. Caterease Software 16.0.1.1663 through 24.0.1.2405 and possibly later versions allows a local attacker to perform an Authentication Bypass by Capture-replay attack due to insufficient protection against capture-replay