Quiter vulnerabilities

We track 8 vulnerabilities in Quiter products across 2 products. 8 are rated high or critical, and none are known to be exploited. The most recent was published on July 8, 2025.

8vulnerabilities

7critical

1high

0exploited

9.5average CVSS score

Latest Quiter vulnerabilities

7.5 High severity
Quiter Gateway (Java WAR on Apache Tomcat): Generation of Error Message Containing Sensitive Information
CVE-2025-40718Jul 8, 2025Quiter
Improper error handling vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to send malformed payloads to generate error messages containing sensitive information.
9.8 Critical severity
Quiter Gateway (Java WAR on Apache Tomcat): Improper Neutralization of Special Elements used in an SQL Command
CVE-2025-40717Jul 8, 2025Quiter
SQL injection vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to retrieve, create, update and delete databases through the pagina.filter.categoria mensaje in /QuiterGatewayWeb/api/v1/sucesospagina.
9.8 Critical severity
Quiter Gateway (Java WAR on Apache Tomcat): Improper Neutralization of Special Elements used in an SQL Command
CVE-2025-40716Jul 8, 2025Quiter
SQL injection vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to retrieve, create, update and delete databases through the suceso.contenido mensaje in /QMSCliente/Sucesos.action.
9.8 Critical severity
Quiter Gateway (Java WAR on Apache Tomcat): Improper Neutralization of Special Elements used in an SQL Command
CVE-2025-40715Jul 8, 2025Quiter
SQL injection vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to retrieve, create, update and delete databases through the campo mensaje in /QISClient/api/v1/sucesospaginas.
9.8 Critical severity
Quiter Gateway (Java WAR on Apache Tomcat): Improper Neutralization of Special Elements used in an SQL Command
CVE-2025-40714Jul 8, 2025Quiter
SQL injection vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to retrieve, create, update and delete databases through the campo id_factura in /<Client>FacturaE/listado_facturas_ficha.jsp.
9.8 Critical severity
Quiter Gateway (Java WAR on Apache Tomcat): Improper Neutralization of Special Elements used in an SQL Command
CVE-2025-40713Jul 8, 2025Quiter
SQL injection vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to retrieve, create, update and delete databases through the campo parameter in/<Client>FacturaE/BusquedasFacturasSesion.
9.8 Critical severity
Quiter Gateway (Java WAR on Apache Tomcat): Improper Neutralization of Special Elements used in an SQL Command
CVE-2025-40712Jul 8, 2025Quiter
SQL injection vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to retrieve, create, update and delete databases through the id_concesion parameter in /<Client>FacturaE/DescargarFactura.
9.8 Critical severity
Quiter Gateway (Java WAR on Apache Tomcat): Improper Neutralization of Special Elements used in an SQL Command
CVE-2025-40711Jul 8, 2025Quiter
SQL injection vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to retrieve, create, update and delete databases through the id_concesion parameter in /<Client>FacturaE/VerFacturaPDF.