← Back

Ellevo

ellevo

3 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Ellevo
ellevo
3 CVEs

CVEs (3)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2024-46655
1Ellevo
1Ellevo
Jun 17, 2026
Sep 25, 2024
N/A· v4
6.1 MEDIUM· v3
N/A· v2
A reflected cross-site scripting (XSS) vulnerability in Ellevo 6.2.0.38160 allows attackers to execute arbitrary code in the context of a user's browser via a crafted payload or URL.
CVE-2024-42760
1Ellevo
1Ellevo
Jun 17, 2026
Sep 11, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
SQL Injection vulnerability in Ellevo v.6.2.0.38160 allows a remote attacker to obtain sensitive information via the /api/mob/instrucao/conta/destinatarios component.
CVE-2024-42759
1Ellevo
1Ellevo
Jun 17, 2026
Sep 9, 2024
N/A· v4
6.3 MEDIUM· v3
N/A· v2
An issue in Ellevo v.6.2.0.38160 allows a remote attacker to escalate privileges via the /api/usuario/cadastrodesuplente endpoint.