GG Soft Software Services Inc. vulnerabilities

🔔 Create alert RSS

Published CVEs affecting GG Soft Software Services Inc. products: 3 record(s), with severity, exploitation and fixes.

Exploited only (KEV) →

CVE-2026-85215 High · 7.1 CWE-89 Oct 2, 2026

SQL Injection in GG Soft's Paperwork

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in GG Soft Software Services Inc. Paperwork allows SQL Injection. This issue affects Paperwork: through 2026-09-09.

CVE-2025-14101 High · 7.1 CWE-639 Dec 17, 2025

IDOR in GG Soft's PaperWork

Authorization Bypass Through User-Controlled Key vulnerability in GG Soft Software Services Inc. PaperWork allows Exploitation of Trusted Identifiers. This issue affects PaperWork: from 5.2.0.9427 before 6.0.

CVE-2025-10968 High · 8.8 CWE-89 Nov 7, 2025

SQLi in GG Soft's PaperWork

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection'), CWE - 564 - SQL Injection: Hibernate vulnerability in GG Soft Software Services Inc. PaperWork allows Blind SQL Injection, SQL Injection. This issue affects PaperWork: from 6.1.0.9390 before 6.1.0.9398.