Court Case Management Plus vulnerabilities

2 known vulnerabilities in Court Case Management Plus from Tyler Technologies. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Court Case Management Plus: Files or Directories Accessible to External Parties

  CVE-2023-6375Nov 30, 2023Tyler Technologies

  Tyler Technologies Court Case Management Plus may store backups in a location that can be accessed by a remote, unauthenticated attacker. Backups may contain sensitive information such as database credentials.

• 9.8 Critical severity

  Court Case Management Plus: Improper Authentication

  CVE-2023-6342Nov 30, 2023Tyler TechnologiesEPSS 1.13%

  Tyler Technologies Court Case Management Plus allows a remote attacker to authenticate as any user by manipulating at least the 'CmWebSearchPfp/Login.aspx?xyzldk=' and 'payforprint_CM/Redirector.ashx?userid=' parameters. The vulnerable "pay for print" feature