https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2022-38771.htmlhttps://patchthecve.com/cve/CVE-2022-38771.htmlWed, 17 Jun 2026 04:57:08 +0000CRITICAL 9.8: The mobile application in Transtek Mojodat FAM (Fixed Asset Management) 2.4.6 allows remote attackers to send SCRIPT tags as injected input to the API request.https://patchthecve.com/cve/CVE-2022-38770.htmlhttps://patchthecve.com/cve/CVE-2022-38770.htmlWed, 17 Jun 2026 04:57:08 +0000MEDIUM 5.3: The mobile application in Transtek Mojodat FAM (Fixed Asset Management) 2.4.6 allows remote attackers to fetch other users' data upon a successful login request.https://patchthecve.com/cve/CVE-2022-38769.htmlhttps://patchthecve.com/cve/CVE-2022-38769.htmlWed, 17 Jun 2026 04:57:08 +0000HIGH 7.5: The mobile application in Transtek Mojodat FAM (Fixed Asset Management) 2.4.6 allows remote attackers to fetch cleartext passwords upon a successful login request.https://patchthecve.com/cve/CVE-2022-38768.htmlhttps://patchthecve.com/cve/CVE-2022-38768.htmlWed, 17 Jun 2026 04:57:08 +0000CRITICAL 9.8: The mobile application in Transtek Mojodat FAM (Fixed Asset Management) 2.4.6 allows remote attackers to bypass authorization.