Fordefence

**Name of the Vulnerable Software and Affected Versions** Talassoft Industrial Management Software versions 4 through 15 **Description** Cross-Site Request Forgery (CSRF) allows an attacker to induce a user to perform actions they did not intend to do. This issue occurs in the Talassoft Industrial Management Software. **Recommendations** Update Talassoft Industrial Management Software to version 16 or later.

**Name of the Vulnerable Software and Affected Versions** Talassoft Industrial Management Software versions V4 through V.15 **Description** A missing authentication for a critical function allows an authentication bypass, enabling unauthorized access to restricted areas of the software. **Recommendations** Update Talassoft Industrial Management Software to version V.16.

**Name of the Vulnerable Software and Affected Versions** Talassoft Industrial Management Software versions 4 through 15 **Description** Improper neutralization of special elements used in an SQL command leads to an SQL injection. This occurs when the software fails to properly sanitize user-supplied data before incorporating it into a database query, potentially allowing an attacker to manipulate the query logic. **Recommendations** Update Talassoft Industrial Management Software to version 16 or later.

**Name of the Vulnerable Software and Affected Versions** Talassoft Industrial Management Software versions 4 through 15 **Description** The software contains hard-coded credentials, which can be used to retrieve embedded sensitive data. **Recommendations** Update Talassoft Industrial Management Software to version 16 or later.

**Name of the Vulnerable Software and Affected Versions** Saphira Connect versions prior to 9 **Description** The issue is related to an Incorrect Execution-Assigned Permissions vulnerability, which allows Privilege Escalation in Saphira Connect. **Recommendations** For versions prior to 9, update to version 9 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive features or modules in Saphira Connect to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Saphira Connect versions prior to 9 **Description** The issue is related to incorrect default permissions in Saphira Connect, allowing privilege escalation. **Recommendations** For versions prior to 9, update to version 9 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Saphira Connect versions prior to 9 **Description** The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks. **Recommendations** For versions prior to 9, update to version 9 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive database queries to minimize the risk of exploitation. Avoid using user-supplied input in SQL commands until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** Saphira Connect versions prior to 9 **Description** The issue affects Saphira Connect, allowing Remote Code Inclusion due to an Execution with Unnecessary Privileges vulnerability. **Recommendations** For versions prior to 9, update to version 9 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive areas of Saphira Connect to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Saphira Connect versions prior to 9 **Description** The issue is related to an Improper Neutralization of Script-Related HTML Tags in a Web Page, also known as Basic XSS, allowing Reflected XSS. This enables potential attackers to inject malicious scripts into web pages. **Recommendations** For versions prior to 9, update to version 9 or later to resolve the issue. As a temporary workaround, consider restricting user input to prevent malicious script injection until a patch is applied.

**Name of the Vulnerable Software and Affected Versions** Innosa Probbys versions prior to 2 **Description** The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks. **Recommendations** For versions prior to 2, update to version 2 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive database operations to minimize the risk of exploitation. Avoid using user-supplied input in SQL commands until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** Exagate SYSGuard 3001 versions prior to 3.2.20.0 **Description** The issue is related to an Authentication Bypass by Assumed-Immutable Data vulnerability, which allows for authentication bypass. This vulnerability affects Exagate SYSGuard 3001. **Recommendations** For versions prior to 3.2.20.0, update to version 3.2.20.0 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive areas of the system to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** TMT Lockcell versions prior to 15 **Description** The issue is related to an Authorization Bypass Through User-Controlled Key vulnerability, which allows for Authentication Abuse and Authentication Bypass. **Recommendations** For versions prior to 15, update to version 15 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** TMT Lockcell versions prior to 15 **Description** The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks. **Recommendations** For versions prior to 15, update to version 15 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive database operations to minimize the risk of exploitation. Avoid using user-supplied input in SQL commands until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** TMT Lockcell versions prior to 15 **Description** The issue is related to the reliance on cookies without validation and integrity checking in a security decision, which allows for privilege abuse and authentication bypass. **Recommendations** For versions prior to 15, update to version 15 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** TMT Lockcell versions prior to 15 **Description** The issue is related to an Unrestricted Upload of File with Dangerous Type vulnerability, which allows Command Injection in TMT Lockcell. **Recommendations** For versions prior to 15, update to version 15 or later to resolve the issue. As a temporary workaround, consider restricting file uploads to prevent command injection until a patch is available.