Winsure vulnerabilities

2 known vulnerabilities in Winsure from Sfs. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  ww.Winsure: Improper Control of Generation of Code

  CVE-2024-7104Sep 16, 2024SFS Consulting

  Improper Control of Generation of Code ('Code Injection') vulnerability in SFS Consulting ww.Winsure allows Code Injection. This issue affects ww.Winsure: before 4.6.2.

• 9.8 Critical severity

  ww.Winsure: Improper Restriction of XML External Entity Reference

  CVE-2024-7098Sep 16, 2024SFS Consulting

  Improper Restriction of XML External Entity Reference vulnerability in SFS Consulting ww.Winsure allows XML Injection. This issue affects ww.Winsure: before 4.6.2.