Vulnerabilidades em AM System
15 resultadosAnálise Vexday
A AM System tem 15 CVEs na base do Vexday, todas publicadas nos últimos 90 dias, o que indica que o risco é recente e se concentra no tempo. Nenhuma delas está listada como sob exploração ativa (KEV) e nenhuma tem severidade crítica pelo CVSS. A fraqueza dominante é o CWE-79 (cross-site scripting).
CVE-2026-108049MEDIUMClickjacking vulnerability in the Alosuite web application.EPSS 0.4%CVE-2026-108048MEDIUMVulnerability due to a lack of request limits in Alosuite’s password recovery functionality.EPSS 0.4%CVE-2026-108046MEDIUMDirect Object Reference (IDOR) vulnerability in AlosuiteEPSS 0.4%CVE-2026-108056MEDIUMStored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality.EPSS 0.3%CVE-2026-108054MEDIUMStored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality.EPSS 0.3%CVE-2026-108055MEDIUMStored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality.EPSS 0.3%CVE-2026-108050MEDIUMStored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality.EPSS 0.3%CVE-2026-108058MEDIUMStored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality.EPSS 0.3%CVE-2026-108052MEDIUMStored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality.EPSS 0.3%CVE-2026-108051MEDIUMStored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality.EPSS 0.3%CVE-2026-108059MEDIUMStored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality.EPSS 0.3%CVE-2026-108060MEDIUMStored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality.EPSS 0.3%CVE-2026-108053MEDIUMStored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality.EPSS 0.3%CVE-2026-108057MEDIUMStored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality.EPSS 0.3%CVE-2026-108047HIGHInadequate authorization vulnerability in Alosuite’s user invitation functionalityEPSS 0.3%