Researchers
Back
Ranjit Pahan
#12959
of 60,596
24.8
Total CVSS
Vulnerabilities
·
3
High
2
Critical
1
PT-2023-12049
2023-04-25
7.5
CVE-2021-23203
Odoo
Odoo Enterprise
The issue is related to improper access control in the reporting engine, allowing remote attackers to download PDF reports for arbitrary documents via crafted requests.
PT-2023-12083
2023-04-25
7.5
CVE-2021-26263
Odoo
Odoo Enterprise
The issue is a cross-site scripting (XSS) problem in the Discuss app, allowing remote attackers to inject arbitrary web script in the browser of a victim by posting crafted contents.
PT-2019-12692
2019-06-05
9.8
CVE-2019-12196
Zoho
Zoho Manageengine Netflow Analyzer
A SQL injection issue allows attackers to execute arbitrary SQL commands via the `DeviceID` parameter in the "/client/api/json/v2/nfareports/compareReport" API endpoint.