SFS Consulting vulnerabilities
We track 3 vulnerabilities in SFS Consulting products across 3 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on September 16, 2024.
3vulnerabilities
3critical
0high
0exploited
9.8average CVSS score
Latest SFS Consulting vulnerabilities
- 9.8 Critical severity
ww.Winsure: Improper Control of Generation of Code
Improper Control of Generation of Code ('Code Injection') vulnerability in SFS Consulting ww.Winsure allows Code Injection. This issue affects ww.Winsure: before 4.6.2.
- 9.8 Critical severity
ww.Winsure: Improper Restriction of XML External Entity Reference
Improper Restriction of XML External Entity Reference vulnerability in SFS Consulting ww.Winsure allows XML Injection. This issue affects ww.Winsure: before 4.6.2.
- 9.8 Critical severity
InsureE GL: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in SFS Consulting InsureE GL allows SQL Injection. This issue affects InsureE GL: before 4.6.2.