Multi-tenant ERP System vulnerabilities
6 known vulnerabilities in Multi-tenant ERP System from Manacle Technologies. 6 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 9.3 Critical severity
Multi-tenant ERP System: Deserialization of Untrusted Data
This vulnerability exists in the ERP system due to unsafe deserialization of user controlled data in the affected functionality. An unauthenticated remote attacker could exploit this vulnerability by supplying specially crafted data to the vulnerable functiona
- 9.3 Critical severity
Multi-tenant ERP System: Improper Neutralization of Special Elements used in an SQL Command
This vulnerability exists in the ERP system due to insufficient validation and parameterization of user supplied input in an API endpoint. An unauthenticated remote attacker could exploit this vulnerability by supplying specially crafted input to the vulnerabl
- 9.3 Critical severity
Multi-tenant ERP System: Insufficient Verification of Data Authenticity
This vulnerability exists in the ERP system due to improper validation of payment callback parameters and inadequate authentication controls in API endpoint. An unauthenticated remote attacker could exploit this vulnerability by manipulating the parameter to c
- 9.2 Critical severity
Multi-tenant ERP System: Exposure of Version-Control Repository to an Unauthorized Control Sphere
This vulnerability exists in the ERP system due to exposure of repository information through a publicly accessible .git directory. An unauthenticated remote attacker could exploit this vulnerability by accessing the exposed .git directory and retrieving repos
- 9.2 Critical severity
Multi-tenant ERP System: Authorization Bypass Through User-Controlled Key
This vulnerability exists in the ERP system due to improper authentication and authorization controls in the API endpoint. An unauthenticated remote attacker could exploit this vulnerability by manipulating parameter which could lead to exposure of sensitive i
- 10.0 Critical severity
Multi-tenant ERP System: Unrestricted Upload of File with Dangerous Type
This vulnerability exists in the ERP system due to improper authentication controls and inadequate file type validation at the API endpoint. An unauthenticated remote attacker could exploit this vulnerability by uploading arbitrary files to a web accessible di