Priority-software Priority — known CVE vulnerabilities

Every CVE whose affected-product data names Priority-software Priority, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (7)

• CVE-2023-23460 — CVSS 9.1 (critical): Priority Web version 19.1.0.68, parameter manipulation on an unspecified end-point may allow authentication bypass.
• CVE-2023-23459 — CVSS 9.1 (critical): Priority Windows may allow Command Execution via SQL Injection using an unspecified method.
• CVE-2024-41697 — CVSS 6.1 (medium): Priority - CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
• CVE-2022-23172 — CVSS 5.5 (medium): An attacker can access to "Forgot my password" button, as soon as he puts users is valid in the system, the system would issue a message…
• CVE-2022-23173 — CVSS 5.5 (medium): this vulnerability affect user that even not allowed to access via the web interface. First of all, the attacker needs to access the "Login…
• CVE-2024-41699 — CVSS 4.4 (medium): Priority – CWE-552: Files or Directories Accessible to External Parties
• CVE-2024-41698 — CVSS 4.3 (medium): Priority – CWE-200: Exposure of Sensitive Information to an Unauthorized Actor