Summar Software vulnerabilities
We track 2 vulnerabilities in Summar Software products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on September 18, 2025.
2vulnerabilities
1critical
1high
0exploited
9.3average CVSS score
Latest Summar Software vulnerabilities
- 8.7 High severity
Portal del Empleado: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in Summar Software´s Portal del Empleado. This vulnerability allows an attacker to retrieve, create, update, and delete the database by sending a POST request using the parameter “ctl00$ContentPlaceHolder1$filtroNombre” in “/MemberP
- 9.8 Critical severity
Mentor – Employee Portal: Deserialization of Untrusted Data
Untrusted data deserialization vulnerability has been found in Mentor - Employee Portal, affecting version 3.83.35. This vulnerability could allow an attacker to execute arbitrary code, by injecting a malicious payload into the “ViewState” field.