Advisories · Technology

Oceanic Software ValeApp.

Every CVE that names Oceanic Software ValeApp among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2024-8607 CVE record

CVSS 8.7 High

SQLi in Oceanic Software's ValeApp
- Oceanic Software ValeApp
- SQL injection
Not analysed yet 27 Sept 2024
CVE-2024-8608 CVE record

CVSS 7.2 High

Stored XSS in Oceanic Software's ValeApp
- Oceanic Software ValeApp
- Cross-site scripting (XSS)
Not analysed yet 27 Sept 2024
CVE-2024-8609 CVE record

CVSS 8.8 High

Improper Access Control in Oceanic Software's ValeApp
- Oceanic Software ValeApp
- Information disclosure
Not analysed yet 27 Sept 2024
CVE-2024-8643 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Session Hijacking in Oceanic Software's ValeApp
- Oceanic Software ValeApp
- Authentication bypass
Not analysed yet 27 Sept 2024
CVE-2024-8644 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Cleartext Storage of Sensitive Information in Oceanic Software's ValeApp
- Oceanic Software ValeApp
- CWE-315
Not analysed yet 27 Sept 2024