Vulnerabilities (CVE)

Filtered by vendor Xm-online Subscribe
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2019-15557 1 Xm-online 1 Xm\^online 2 User Account And Authentication Server 2023-12-10 7.5 HIGH 9.8 CRITICAL
XM^online 2 User Account and Authentication server 1.0.0 allows SQL injection via a tenant key.
CVE-2019-15558 1 Xm-online 1 Xm\^online 2 - Common Utils And Endpoints 2023-12-10 7.5 HIGH 9.8 CRITICAL
XM^online 2 Common Utils and Endpoints 0.2.1 allows SQL injection, related to Constants.java, DropSchemaResolver.java, and SchemaChangeResolver.java.