Vulnerabilidades de Abacre
CVEs publicadas que afetam produtos de Abacre: 3 registro(s), com severidade, exploração e correções.
CVE-2025-67263
Média · 6.1
CWE-79 20/01/2026
Cross-site Scripting (XSS) em Abacre Retail Point Of Sale
Abacre Retail Point of Sale 14.0.0.396 is affected by a stored cross-site scripting (XSS) vulnerability in the Clients module. The application fails to properly sanitize user-supplied input stored in the Name and Surname fields. An attacker can insert malicious HTML or script content into these fields, which, persisted in the database.
CVE-2025-67261
Média · 6.5
CWE-89 20/01/2026
SQL Injection em Abacre Retail Point Of Sale
Abacre Retail Point of Sale 14.0.0.396 is vulnerable to content-based blind SQL injection. The vulnerability exists in the Search function of the Orders page.
CVE-2025-65320
Alta · 7.5
CWE-312 03/12/2025
Cleartext Storage of Sensitive Information em Abacre Restaurant Point Of Sale
Abacre Restaurant Point of Sale (POS) up to 15.0.0.1656 are vulnerable to Cleartext Storage of Sensitive Information in Memory. The application leaves valid device-bound license keys in process memory during an activation attempt.