PatchTheCVEe-invoice approval system vulnerabilities and fixes
Recent CVEs affecting e-invoice approval system, with upgrade or downgrade steps. 2 tracked.
Also searched as: e invoice approval system, e-invoiceapprovalsystem.
e-invoice approval system has 2 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 2. Most recent: 2023-07-25. Highest priority: CVE-2023-35066 (score 52/100).
- CVE-2023-35067 HIGH 7.5 UPGRADE Plaintext Storage of a Password vulnerability in Infodrom Software E-Invoice Approval System allows Read Sensi
- CVE-2023-35066 CRITICAL 9.8 UPGRADE Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Infodrom
FAQ
How do I fix e-invoice approval system vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is e-invoice approval system being exploited right now?
None of the tracked e-invoice approval system CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which e-invoice approval system CVE should I patch first?
CVE-2023-35066 currently ranks highest (52/100): Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Infodrom.