Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 11

Export CSV
CVE-2025-40715

SQL injection vulnerability in Quiter Gateway

SQL injection vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to retrieve, create, update and delete databases through the campo mensaje in /QISClient/api/v1/sucesospaginas.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed
Vendors
Quiter
Products
Quiter Gateway
CVE-2025-40716

SQL injection vulnerability in Quiter Gateway

SQL injection vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to retrieve, create, update and delete databases through the suceso.contenido mensaje in /QMSCliente/Sucesos.action.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed
Vendors
Quiter
Products
Quiter Gateway
CVE-2025-40717

SQL injection vulnerability in Quiter Gateway

SQL injection vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to retrieve, create, update and delete databases through the pagina.filter.categoria mensaje in /QuiterGatewayWeb/api/v1/sucesospagina.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed
Vendors
Quiter
Products
Quiter Gateway
CVE-2025-40718

Improper error handling vulnerability in Quiter Gateway

Improper error handling vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to send malformed payloads to generate error messages containing sensitive information.

CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Vendors
Quiter
Products
Quiter Gateway
CVE-2025-40719

Reflected Cross-site Scripting (XSS) vulnerability in Quiter Gateway

Reflected Cross-site Scripting (XSS) vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending a malicious URL trhough the id_concesion parameter in /<Client>FacturaE/VerFacturaPDF.

CVSS 4.0 · 5.1 Medium EPSS < 1% KEV · Not listed
Vendors
Quiter
Products
Quiter Gateway
CVE-2025-40720

Reflected Cross-site Scripting (XSS) vulnerability in Quiter Gateway

Reflected Cross-site Scripting (XSS) vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending a malicious URL trhough the campo parameter in /<Client>FacturaE/VerFacturaPDF.

CVSS 4.0 · 5.1 Medium EPSS < 1% KEV · Not listed
Vendors
Quiter
Products
Quiter Gateway
CVE-2025-40721

Reflected Cross-site Scripting (XSS) vulnerability in Quiter Gateway

Reflected Cross-site Scripting (XSS) vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending a malicious URL trhough the id_factura parameter in /<Client>FacturaE/listado_facturas_ficha.jsp.

CVSS 4.0 · 5.1 Medium EPSS < 1% KEV · Not listed
Vendors
Quiter
Products
Quiter Gateway
CVE-2025-40711

SQL injection vulnerability in Quiter Gateway

SQL injection vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to retrieve, create, update and delete databases through the id_concesion parameter in /<Client>FacturaE/VerFacturaPDF.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed
Vendors
Quiter
Products
Quiter Gateway
CVE-2025-40712

SQL injection vulnerability in Quiter Gateway

SQL injection vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to retrieve, create, update and delete databases through the id_concesion parameter in /<Client>FacturaE/DescargarFactura.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed
Vendors
Quiter
Products
Quiter Gateway
CVE-2025-40713

SQL injection vulnerability in Quiter Gateway

SQL injection vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to retrieve, create, update and delete databases through the campo parameter in/<Client>FacturaE/BusquedasFacturasSesion.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed
Vendors
Quiter
Products
Quiter Gateway
CVE-2025-40714

SQL injection vulnerability in Quiter Gateway

SQL injection vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to retrieve, create, update and delete databases through the campo id_factura in /<Client>FacturaE/listado_facturas_ficha.jsp.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed
Vendors
Quiter
Products
Quiter Gateway