Vulnerabilidades de Otalio

🔔 Criar alerta RSS

CVEs publicadas que afetam produtos de Otalio: 2 registro(s), com severidade, exploração e correções.

Ship Property Management System 2

Somente exploradas (KEV) →

CVE-2025-9211 Média · 6.7 CWE-79 18/08/2026

Cross-site scripting in Otalio Ship Property Management System

Unescaped stored values in application security page in Otalio Ship Property Management System versions before 2.22.0 allows authenticated attackers to escalate privileges via persistent cross-site scripting

CVE-2025-9210 Alta · 8.1 CWE-347 18/08/2026

Missing JSON Web Token signature validation in Otalio Ship Property Management System

Missing signature validation in JSON Web Tokens in Otalio Ship Property Management System versions before 2.22.0 allows authenticated attackers to escalate privileges via tampering with JWTs