PatchTheCVEunit4 vulnerabilities
Recent CVEs affecting unit4 products. 10 tracked.
unit4 has 10 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 6. Most recent: 2024-03-20. Highest priority: CVE-2022-27434 (score 62/100).
- CVE-2024-28735 HIGH 8.1 UPGRADE Unit4 Financials by Coda versions prior to 2023Q4 suffer from an incorrect access control authorization bypass
- CVE-2022-34001 MEDIUM 6.5 UPGRADE Unit4 ERP through 7.9 allows XXE via ExecuteServerProcessAsynchronously.
- CVE-2022-27434 CRITICAL 9.8 UPGRADE UNIT4 TETA Mobile Edition (ME) before 29.5.HF17 was discovered to contain a SQL injection vulnerability via th
- CVE-2021-36234 MEDIUM 5.5 DOWNGRADE Use of a hard-coded cryptographic key in MIK.starlight 7.9.5.24363 allows local users to decrypt credentials v
- CVE-2021-36233 MEDIUM 6.5 DOWNGRADE The function AdminGetFirstFileContentByFilePath in MIK.starlight 7.9.5.24363 allows (by design) an authenticat
- CVE-2021-36232 HIGH 8.8 DOWNGRADE Improper Authorization in multiple functions in MIK.starlight 7.9.5.24363 allows an authenticated attacker to
- CVE-2021-36231 HIGH 8.8 DOWNGRADE Deserialization of untrusted data in multiple functions in MIK.starlight 7.9.5.24363 allows authenticated remo
- CVE-2015-2082 MEDIUM 4.3 UPGRADE Cross-site scripting (XSS) vulnerability in Login.aspx in UNIT4 Prosoft HRMS before 8.14.330.43 allows remote
- CVE-2015-1174 CRITICAL 9.8 UPGRADE Session fixation vulnerability in Unit4 Polska TETA Web (formerly TETA Galactica) 22.62.3.4 and earlier allows
- CVE-2015-1173 HIGH 7.5 UPGRADE Unit4 Polska TETA Web (formerly TETA Galactica) 22.62.3.4 does not properly restrict access to the (1) Design
FAQ
How do I fix unit4 vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is unit4 being exploited right now?
None of the tracked unit4 CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which unit4 CVE should I patch first?
CVE-2022-27434 currently ranks highest (62/100): UNIT4 TETA Mobile Edition (ME) before 29.5.HF17 was discovered to contain a SQL injection vulnerability via th.