Advisories · Technology
Business-DNA Solutions GmbH TopEase.
Every CVE that names Business-DNA Solutions GmbH TopEase among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.1 High
Insufficient Session Expiration in TopEase
- Business-DNA Solutions GmbH TopEase
- Authentication bypass
- CVSS 7.5 High
Lack of Rate limiting in Authentication in TopEase
- Business-DNA Solutions GmbH TopEase
- Authentication bypass
- CVSS 7.3 High
Missing Upload Filter in TopEase
- Business-DNA Solutions GmbH TopEase
- Unrestricted file upload
- CVSS 4.3 Medium
Denial of Service via Invalid Object Attribute in TopEase
- Business-DNA Solutions GmbH TopEase
- CWE-20
- CVSS 4.3 Medium
Denial of Service via Invalid Date Format in TopEase
- Business-DNA Solutions GmbH TopEase
- CWE-20
- CVSS 6.5 Medium
Missing Character Length (Denial of Service) in TopEase
- Business-DNA Solutions GmbH TopEase
- CWE-20
- CVSS 7.3 High
Stored XSS in Search Function in TopEase
- Business-DNA Solutions GmbH TopEase
- Cross-site scripting (XSS)
- CVSS 8.1 High
Stored XSS in TopEase
- Business-DNA Solutions GmbH TopEase
- Cross-site scripting (XSS)
- CVSS 3.5 Low
UI Redressing in TopEase
- Business-DNA Solutions GmbH TopEase
- CWE-20
- CVSS 4.3 Medium
Unauthorized Menu Item Access in TopEase
- Business-DNA Solutions GmbH TopEase
- Broken access control
- CVSS 8.1 High
Missing HTTPOnly flag on sensitive cookie in TopEase
- Business-DNA Solutions GmbH TopEase
- CWE-1004