Unit4 vulnerabilities
We track 2 vulnerabilities in Unit4 products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on March 20, 2024.
2vulnerabilities
1critical
1high
0exploited
8.9average CVSS score
Latest Unit4 vulnerabilities
- 8.1 High severity
unit_4_financials: Improper Authentication
Unit4 Financials by Coda versions prior to 2023Q4 suffer from an incorrect access control authorization bypass vulnerability which allows an authenticated user to modify the password of any user of the application via a crafted request.
- 9.8 Critical severity
Teta: Improper Neutralization of Special Elements used in an SQL Command
UNIT4 TETA Mobile Edition (ME) before 29.5.HF17 was discovered to contain a SQL injection vulnerability via the ProfileName parameter in the errorReporting page.