Every CVE whose affected-product data names Sfs Winsure, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.
CVEs (2)
CVE-2024-7098 — CVSS 9.8 (critical): Improper Restriction of XML External Entity Reference vulnerability in SFS Consulting ww.Winsure allows XML Injection. This issue affects…
CVE-2024-7104 — CVSS 9.8 (critical): Improper Control of Generation of Code ('Code Injection') vulnerability in SFS Consulting ww.Winsure allows Code Injection. This issue…