Talya Informatics vulnerabilities
We track 3 vulnerabilities in Talya Informatics products across 2 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on June 27, 2024.
Latest Talya Informatics vulnerabilities
- 9.8 Critical severity
Travel APPS: Authorization Bypass Through User-Controlled Key
Authorization Bypass Through User-Controlled Key vulnerability in Talya Informatics Travel APPS allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Travel APPS: before v17.0.68.
- 9.8 Critical severity
Elektraweb: Missing Authentication for Critical Functionality
Missing Authentication, Files or Directories Accessible to External Parties, Use of Hard-coded Credentials vulnerability in Talya Informatics Elektraweb allows Authentication Bypass. This issue affects Elektraweb: before v17.0.68.
- 9.8 Critical severity
Elektraweb: Reliance on Cookies without Validation and Integrity Checking
Reliance on Cookies without Validation and Integrity Checking vulnerability in Talya Informatics Elektraweb allows Session Credential Falsification through Manipulation, Accessing/Intercepting/Modifying HTTP Cookies, Manipulating Opaque Client-based Data Token