Finesoft Project Finesoft — known CVE vulnerabilities

Every CVE whose affected-product data names Finesoft Project Finesoft, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2024-37679 — CVSS 6.1 (medium): Cross Site Scripting vulnerability in Hangzhou Meisoft Information Technology Co., Ltd. Finesoft v.8.0 and before allows a remote attacker…
• CVE-2024-37680 — CVSS 6.1 (medium): Hangzhou Meisoft Information Technology Co., Ltd. FineSoft <=8.0 is affected by Cross Site Scripting (XSS) which allows remote attackers to…
• CVE-2024-35504 — CVSS 5.4 (medium): A cross-site scripting (XSS) vulnerability in the login page of FineSoft v8.0 allows attackers to execute arbitrary web scripts or HTML via…
• CVE-2024-37678 — CVSS 5.3 (medium): Cross Site Scripting vulnerability in Hangzhou Meisoft Information Technology Co., Ltd. Finesoft v.8.0 and before allows a remote attacker…