Quatuor vulnerabilities

We track 12 vulnerabilities in Quatuor products across 2 products. 12 are rated high or critical, and none are known to be exploited. The most recent was published on January 27, 2026.

12vulnerabilities

0critical

12high

0exploited

7.5average CVSS score

Latest Quatuor vulnerabilities

7.5 High severity
Evaluación de Desempeño (EDD): Improper Neutralization of Special Elements used in an SQL Command
CVE-2026-1483Jan 27, 2026Quatuor
An out-of-band SQL injection vulnerability (OOB SQLi) has been detected in the Performance Evaluation (EDD) application developed by Gabinete Técnico de Programación. Exploiting this vulnerability in the parameter 'Id_usuario' in '/evaluacion_objetivos_ver_aut
7.5 High severity
Evaluación de Desempeño (EDD): Improper Neutralization of Special Elements used in an SQL Command
CVE-2026-1482Jan 27, 2026Quatuor
An out-of-band SQL injection vulnerability (OOB SQLi) has been detected in the Performance Evaluation (EDD) application developed by Gabinete Técnico de Programación. Exploiting this vulnerability in the parameter 'Id_evaluacion' in '/evaluacion_objetivos_eval
7.5 High severity
Evaluación de Desempeño (EDD): Improper Neutralization of Special Elements used in an SQL Command
CVE-2026-1481Jan 27, 2026Quatuor
An out-of-band SQL injection vulnerability (OOB SQLi) has been detected in the Performance Evaluation (EDD) application developed by Gabinete Técnico de Programación. Exploiting this vulnerability in the parameter 'Id_usuario' in '/evaluacion_objetivos_anyo_si
7.5 High severity
Evaluación de Desempeño (EDD): Improper Neutralization of Special Elements used in an SQL Command
CVE-2026-1480Jan 27, 2026Quatuor
An out-of-band SQL injection vulnerability (OOB SQLi) has been detected in the Performance Evaluation (EDD) application developed by Gabinete Técnico de Programación. Exploiting this vulnerability in the parameter 'Id_usuario' in '/evaluacion_objetivos_anyo_si
7.5 High severity
Evaluación de Desempeño (EDD): Improper Neutralization of Special Elements used in an SQL Command
CVE-2026-1479Jan 27, 2026Quatuor
An out-of-band SQL injection vulnerability (OOB SQLi) has been detected in the Performance Evaluation (EDD) application developed by Gabinete Técnico de Programación. Exploiting this vulnerability in the parameters 'Id_usuario' and 'Id_evaluacion’ in ‘/evaluac
7.5 High severity
Evaluación de Desempeño (EDD): Improper Neutralization of Special Elements used in an SQL Command
CVE-2026-1478Jan 27, 2026Quatuor
An out-of-band SQL injection vulnerability (OOB SQLi) has been detected in the Performance Evaluation (EDD) application developed by Gabinete Técnico de Programación. Exploiting this vulnerability in the parameter 'Id_usuario' and 'Id_evaluacion’ in ‘/evaluaci
7.5 High severity
Evaluación de Desempeño (EDD): Improper Neutralization of Special Elements used in an SQL Command
CVE-2026-1477Jan 27, 2026Quatuor
An out-of-band SQL injection vulnerability (OOB SQLi) has been detected in the Performance Evaluation (EDD) application developed by Gabinete Técnico de Programación. Exploiting this vulnerability in the parameter 'Id_usuario' and 'Id_evaluacion’ in ‘/evaluaci
7.5 High severity
Evaluación de Desempeño (EDD): Improper Neutralization of Special Elements used in an SQL Command
CVE-2026-1476Jan 27, 2026Quatuor
An out-of-band SQL injection vulnerability (OOB SQLi) has been detected in the Performance Evaluation (EDD) application developed by Gabinete Técnico de Programación. Exploiting this vulnerability in the parameter 'Id_usuario' in ‘/evaluacion_acciones_ver_auto
7.5 High severity
Evaluación de Desempeño (EDD): Improper Neutralization of Special Elements used in an SQL Command
CVE-2026-1475Jan 27, 2026Quatuor
An out-of-band SQL injection vulnerability (OOB SQLi) has been detected in the Performance Evaluation (EDD) application developed by Gabinete Técnico de Programación. Exploiting this vulnerability in the parameter ‘Id_usuario' in ‘/evaluacion_acciones_evalua.a
7.5 High severity
Evaluación de Desempeño (EDD): Improper Neutralization of Special Elements used in an SQL Command
CVE-2026-1474Jan 27, 2026Quatuor
An out-of-band SQL injection vulnerability (OOB SQLi) has been detected in the Performance Evaluation (EDD) application developed by Gabinete Técnico de Programación. Exploiting this vulnerability in the parameter 'Id_usuario' and 'Id_evaluacion' en ‘/evaluaci
7.5 High severity
Evaluación de Desempeño (EDD): Improper Neutralization of Special Elements used in an SQL Command
CVE-2026-1473Jan 27, 2026Quatuor
An out-of-band SQL injection vulnerability (OOB SQLi) has been detected in the Performance Evaluation (EDD) application developed by Gabinete Técnico de Programación. Exploiting this vulnerability in the parameter 'Id_usuario’ in '/evaluacion_competencias_eval
7.5 High severity
Evaluación de Desempeño (EDD): Improper Neutralization of Special Elements used in an SQL Command
CVE-2026-1472Jan 27, 2026Quatuor
An out-of-band SQL injection vulnerability (OOB SQLi) has been detected in the Performance Evaluation (EDD) application developed by Gabinete Técnico de Programación. Exploiting this vulnerability in the parameter 'txAny' in '/evaluacion_competencias_autoeval_