Celk

celk

4 CVEs • 1 product

Products (1)

Click to collapse

Toggle

CVEs (4)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2024-55198 1Celk 1Celk Saude Jun 17, 2026 Mar 13, 2025 N/A· v4 5.3 MEDIUM· v3 N/A· v2 User Enumeration via Discrepancies in Error Messages in the Celk Sistemas Celk Saude v.3.1.252.1 password recovery functionality which allows a remote attacker to enumerate users through discrepancies in the responses.
CVE-2024-55199 1Celk 1Celk Saude Jun 17, 2026 Mar 10, 2025 N/A· v4 5.4 MEDIUM· v3 N/A· v2 A Stored Cross Site Scripting (XSS) vulnerability in Celk Sistemas Celk Saude v.3.1.252.1 allows a remote attacker to store JavaScript code inside a PDF file through the file upload feature. When the file is rendered, th...Show more A Stored Cross Site Scripting (XSS) vulnerability in Celk Sistemas Celk Saude v.3.1.252.1 allows a remote attacker to store JavaScript code inside a PDF file through the file upload feature. When the file is rendered, the injected code is executed on the user's browser.Show less
CVE-2024-51182 1Celk 1Celk Saude Jun 17, 2026 Jan 29, 2025 N/A· v4 6.1 MEDIUM· v3 N/A· v2 HTML Injection vulnerability in Celk Sistemas Celk Saude v.3.1.252.1 allows a remote attacker to inject arbitrary HTML code via the "erro" parameter.
CVE-2024-48761 1Celk 1Celk Saude Jun 17, 2026 Jan 29, 2025 N/A· v4 8.8 HIGH· v3 N/A· v2 Reflected XSS vulnerability in Celk Sistemas Celk Saude v.3.1.252.1 allows a remote attacker to inject arbitrary JavaScript code via the "erro" parameter.