Tylertech vulnerabilities
We track 4 vulnerabilities in Tylertech products across 3 products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on August 7, 2025.
Latest Tylertech vulnerabilities
- 7.4 High severity
ERP Pro 9 SaaS: Execution with Unnecessary Privileges
Tyler Technologies ERP Pro 9 SaaS allows an authenticated user to escape the application and execute limited operating system commands within the remote Microsoft Windows environment with the privileges of the authenticated user. Tyler Technologies deployed ha
- 9.4 Critical severity
Magistrate Court Case Management Plus: Improper Authentication
Tyler Technologies Magistrate Court Case Management Plus allows an unauthenticated, remote attacker to upload, delete, and view files by manipulating the PDFViewer.aspx 'filename' parameter.
- 9.4 Critical severity
Civil and Criminal Electronic Filing: Improper Authentication
Tyler Technologies Civil and Criminal Electronic Filing allows an unauthenticated, remote attacker to upload, delete, and view files by manipulating the Upload.aspx 'enky' parameter.
- 7.5 High severity
Odyssey Portal: Authorization Bypass Through User-Controlled Key
An Insecure Direct Object Reference issue exists in the Tyler Odyssey Portal platform before 17.1.20. This may allow an external party to access sensitive case records.