CVE Intelligence

Priority vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Priority products: 14 record(s), with severity, exploitation and fixes.

Portal Generator addon to Priority ERP (developed by Soft Solutions). 9Web 5

Exploited only (KEV) →

CVE-2026-59507 Critical · 9.3 CWE-798 Aug 13, 2026
Priority – CWE-798: Use of Hard-coded Credentials CWE-200: Exposure of Sensitive Information to an Unauthorized Actor CWE-284: Improper Access Control
: Use of Hard-coded Credentials : Exposure of Sensitive Information to an Unauthorized Actor : Improper Access Control vulnerability in Priority Portal Generator addon to Priority ERP (developed by Soft Solutions). This issue affects Portal Generator addon to Priority ERP (developed by Soft Solutions): All versions without Priwall v3.
CVE-2026-59506 Critical · 9.3 CWE-306 Aug 13, 2026
Priority – CWE-306: Missing Authentication for Critical Function
: Missing Authentication for Critical Function vulnerability in Priority Portal Generator addon to Priority ERP (developed by Soft Solutions). This issue affects Portal Generator addon to Priority ERP (developed by Soft Solutions): All versions without Priwall v3.
CVE-2026-59505 High · 8.6 CWE-284 Aug 13, 2026
Priority - CWE-284: Improper Access Control
: Improper Access Control vulnerability in Priority Portal Generator addon to Priority ERP (developed by Soft Solutions). This issue affects Portal Generator addon to Priority ERP (developed by Soft Solutions): All versions without Priwall v3.
CVE-2026-59504 Critical · 9.1 CWE-602 Aug 13, 2026
Priority – CWE-602: Client-Side Enforcement of Server-Side Security
: Client-Side Enforcement of Server-Side Security vulnerability in Priority Portal Generator addon to Priority ERP (developed by Soft Solutions). This issue affects Portal Generator addon to Priority ERP (developed by Soft Solutions): All versions without Priwall v3.
CVE-2026-59503 Critical · 9.1 CWE-200 Aug 13, 2026
Priority – CWE-200: Exposure of Sensitive Information to an Unauthorized Actor CWE-359: Exposure of Private Personal Information to an Unauthorized Actor
: Exposure of Sensitive Information to an Unauthorized Actor : Exposure of Private Personal Information to an Unauthorized Actor vulnerability in Priority Portal Generator addon to Priority ERP (developed by Soft Solutions). This issue affects Portal Generator addon to Priority ERP (developed by Soft Solutions): All versions without Priwall v3.
CVE-2026-59502 Medium · 5.3 CWE-203 Aug 13, 2026
Priority - CWE-203: Observable Discrepancy
: Observable Discrepancy vulnerability in Priority Portal Generator addon to Priority ERP (developed by Soft Solutions). This issue affects Portal Generator addon to Priority ERP (developed by Soft Solutions): All versions without Priwall v3.
CVE-2026-59501 High · 8.2 CWE-284 Aug 13, 2026
Priority – CWE-284: Improper Access Control
: Improper Access Control vulnerability in Priority Portal Generator addon to Priority ERP (developed by Soft Solutions). This issue affects Portal Generator addon to Priority ERP (developed by Soft Solutions): All versions without Priwall v3.
CVE-2026-59500 Critical · 10.0 CWE-287 Aug 13, 2026
Priority - CWE-287: Improper Authentication
: Improper Authentication vulnerability in Priority Portal Generator addon to Priority ERP (developed by Soft Solutions). This issue affects Portal Generator addon to Priority ERP (developed by Soft Solutions): All versions without Priwall v3.
CVE-2026-59499 High · 8.6 CWE-200 Aug 13, 2026
Priority – CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Priority Portal Generator addon to Priority ERP (developed by Soft Solutions).. This issue affects Portal Generator addon to Priority ERP (developed by Soft Solutions).: All versions without Priwall v3.
CVE-2025-55064 Medium · 4.8 CWE-79 Dec 29, 2025
Priority - CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')
CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')
CVE-2025-55063 Medium · 4.8 CWE-79 Dec 29, 2025
Priority - CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')
CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')
CVE-2025-55062 Medium · 4.8 CWE-79 Dec 29, 2025
Priority - CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')
CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')
CVE-2025-55061 High · 8.8 CWE-434 Dec 29, 2025
Priority - CWE-434 Unrestricted Upload of File with Dangerous Type
CWE-434 Unrestricted Upload of File with Dangerous Type
CVE-2025-55060 Medium · 6.1 CWE-601 Dec 29, 2025
Priority - CWE-601: URL Redirection to Untrusted Site ('Open Redirect')
CWE-601 URL Redirection to Untrusted Site ('Open Redirect')