Notrinos Notrinoserp — known CVE vulnerabilities

Every CVE whose affected-product data names Notrinos Notrinoserp, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2022-2927 — CVSS 9.8 (critical): Weak Password Requirements in GitHub repository notrinos/notrinoserp prior to 0.7.
• CVE-2022-2921 — CVSS 8.8 (high): Exposure of Private Personal Information to an Unauthorized Actor in GitHub repository notrinos/notrinoserp prior to v0.7. This results in…
• CVE-2023-24788 — CVSS 8.8 (high): NotrinosERP v0.7 was discovered to contain a SQL injection vulnerability via the OrderNumber parameter at /NotrinosERP/sales/customer_delive…
• CVE-2022-2871 — CVSS 5.4 (medium): Cross-site Scripting (XSS) - Stored in GitHub repository notrinos/notrinoserp prior to 0.7.
• CVE-2022-2965 — CVSS 4.3 (medium): Improper Restriction of Rendered UI Layers or Frames in GitHub repository notrinos/notrinoserp prior to 0.7.