Vulnerabilidades de Logo Software Inc.
CVEs publicadas que afetam produtos de Logo Software Inc.: 5 registro(s), com severidade, exploração e correções.
CVE-2025-0609
Média · 4.7
CWE-79 06/10/2025
XSS in Logo Software's Logo Cloud
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Logo Software Inc. Logo Cloud allows Cross-Site Scripting (XSS).
This issue affects Logo Cloud: before 1.18.
CVE-2025-0608
Média · 5.5
CWE-601 06/10/2025
Open Redirect in Logo Software's Logo Cloud
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Logo Software Inc. Logo Cloud allows Phishing, Forceful Browsing.
This issue affects Logo Cloud: before 2025.R6.
CVE-2025-0607
Média · 4.3
CWE-116 06/10/2025
HTML Injection in Logo Software's Logo Cloud
Improper Encoding or Escaping of Output vulnerability in Logo Software Inc. Logo Cloud allows Phishing.
This issue affects Logo Cloud: before 2.57.
CVE-2025-0606
Média · 6.0
CWE-639 06/10/2025
IDOR in Logo Software's Logo Cloud
Authorization Bypass Through User-Controlled Key vulnerability in Logo Software Inc. Logo Cloud allows Forceful Browsing, Resource Leak Exposure.
This issue affects Logo Cloud: before 0.67.
CVE-2025-10609
Média · 5.9
CWE-798 03/10/2025
Hardcoded Credentials in Logo Software's TigerWings ERP
Use of Hard-coded Credentials vulnerability in Logo Software Inc. TigerWings ERP allows Read Sensitive Constants Within an Executable.
This issue affects TigerWings ERP: from 01.01.00 before 3.03.00.