Oceanicsoft

oceanicsoft

5 CVEs • 1 product

Products (1)

Click to collapse

Toggle

CVEs (5)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2024-8644 1Oceanicsoft 1Valeapp Jun 17, 2026 Sep 27, 2024 9.3 CRITICAL· v4 7.5 HIGH· v3 N/A· v2 Cleartext Storage of Sensitive Information in a Cookie vulnerability in Oceanic Software ValeApp allows Protocol Manipulation, : JSON Hijacking (aka JavaScript Hijacking). This issue affects ValeApp: before v2.0.0.
CVE-2024-8643 1Oceanicsoft 1Valeapp Jun 17, 2026 Sep 27, 2024 9.3 CRITICAL· v4 9.8 CRITICAL· v3 N/A· v2 Session Fixation vulnerability in Oceanic Software ValeApp allows Brute Force, Session Hijacking. This issue affects ValeApp: before v2.0.0.
CVE-2024-8609 1Oceanicsoft 1Valeapp Jun 17, 2026 Sep 27, 2024 8.8 HIGH· v4 7.5 HIGH· v3 N/A· v2 Insertion of Sensitive Information into Log File vulnerability in Oceanic Software ValeApp allows Query System for Information. This issue affects ValeApp: before v2.0.0.
CVE-2024-8608 1Oceanicsoft 1Valeapp Jun 17, 2026 Sep 27, 2024 7.2 HIGH· v4 5.4 MEDIUM· v3 N/A· v2 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Oceanic Software ValeApp allows Stored XSS. This issue affects ValeApp: before v2.0.0.
CVE-2024-8607 1Oceanicsoft 1Valeapp Jun 17, 2026 Sep 27, 2024 8.7 HIGH· v4 9.8 CRITICAL· v3 N/A· v2 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Oceanic Software ValeApp allows SQL Injection. This issue affects ValeApp: before v2.0.0.