Advisories · Technology

AM System ALO Suite.

Every CVE that names AM System ALO Suite among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-108060 CVE record

CVSS 5.1 Medium

Stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality.
- AM System ALO Suite
- Cross-site scripting (XSS)
Not analysed yet 3 Nov 2026
CVE-2026-108059 CVE record

CVSS 5.1 Medium

Stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality.
- AM System ALO Suite
- Cross-site scripting (XSS)
Not analysed yet 3 Nov 2026
CVE-2026-108058 CVE record

CVSS 5.1 Medium

Stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality.
- AM System ALO Suite
- Cross-site scripting (XSS)
Not analysed yet 3 Nov 2026
CVE-2026-108057 CVE record

CVSS 5.1 Medium

Stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality.
- AM System ALO Suite
- Cross-site scripting (XSS)
Not analysed yet 3 Nov 2026
CVE-2026-108056 CVE record

CVSS 5.1 Medium

Stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality.
- AM System ALO Suite
- Cross-site scripting (XSS)
Not analysed yet 3 Nov 2026
CVE-2026-108055 CVE record

CVSS 5.1 Medium

Stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality.
- AM System ALO Suite
- Cross-site scripting (XSS)
Not analysed yet 3 Nov 2026
CVE-2026-108054 CVE record

CVSS 5.1 Medium

Stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality.
- AM System ALO Suite
- Cross-site scripting (XSS)
Not analysed yet 3 Nov 2026
CVE-2026-108053 CVE record

CVSS 5.1 Medium

Stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality.
- AM System ALO Suite
- Cross-site scripting (XSS)
Not analysed yet 3 Nov 2026
CVE-2026-108052 CVE record

CVSS 5.1 Medium

Stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality.
- AM System ALO Suite
- Cross-site scripting (XSS)
Not analysed yet 3 Nov 2026
CVE-2026-108051 CVE record

CVSS 5.1 Medium

Stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality.
- AM System ALO Suite
- Cross-site scripting (XSS)
Not analysed yet 3 Nov 2026
CVE-2026-108050 CVE record

CVSS 5.1 Medium

Stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality.
- AM System ALO Suite
- Cross-site scripting (XSS)
Not analysed yet 3 Nov 2026
CVE-2026-108049 CVE record

CVSS 5.1 Medium

Clickjacking vulnerability in the Alosuite web application.
- AM System ALO Suite
- CWE-1021
Not analysed yet 3 Nov 2026
CVE-2026-108048 CVE record

CVSS 6.9 Medium

Vulnerability due to a lack of request limits in Alosuite’s password recovery functionality.
- AM System ALO Suite
- Denial of service
Not analysed yet 3 Nov 2026
CVE-2026-108047 CVE record

CVSS 8.6 High

Inadequate authorization vulnerability in Alosuite’s user invitation functionality
- AM System ALO Suite
- Broken access control
Not analysed yet 3 Nov 2026
CVE-2026-108046 CVE record

CVSS 6.9 Medium

Direct Object Reference (IDOR) vulnerability in Alosuite
- AM System ALO Suite
- Broken access control
Not analysed yet 3 Nov 2026