VendorsSesamicash_point_%5C%26_transport_optimizerall versions
Vulnerabilities

Sesami Cash Point & Transport Optimizer

Ranked by severity, then by exploit likelihood, unless you sort otherwise. Click a CVE ID for its full record.

11CVEs
CVE-2023-31294
CSV Injection vulnerability in Sesami Cash Point & Transport Optimizer (CPTO) version 6.3.8.6 (#718), allows remote attackers to obtain sensitive information via the Delivery Name field.
Published 2023-12-29 · Modified
7.5EPSS 0.006
CVE-2023-31295
CSV Injection vulnerability in Sesami Cash Point & Transport Optimizer (CPTO) version 6.3.8.6 (#718), allows remote attackers to obtain sensitive information via the User Profile field.
Published 2023-12-29 · Modified
7.5EPSS 0.006
CVE-2023-31300
An issue was discovered in Sesami Cash Point & Transport Optimizer (CPTO) version 6.3.8.6 (#718), allows remote attackers to obtain sensitive information via transmission of unencrypted, cleartext credentials during Password Reset feature.
Published 2023-12-29 · Modified
7.5EPSS 0.004
CVE-2023-31299
Cross Site Scripting (XSS) vulnerability in Sesami Cash Point & Transport Optimizer (CPTO) version 6.3.8.6 (#718), allows remote attackers to execute arbitrary code via the Barcode field of a container.
Published 2023-12-29 · Modified
6.1EPSS 0.005
CVE-2023-31301
Stored Cross Site Scripting (XSS) Vulnerability in Sesami Cash Point & Transport Optimizer (CPTO) version 6.3.8.6 (#718), allows remote attackers to execute arbitrary code and obtain sensitive information via the Username field of the login form and application log.
Published 2023-12-29 · Modified
6.1EPSS 0.005
CVE-2023-31302
Cross Site Scripting (XSS) vulnerability in Sesami Cash Point & Transport Optimizer (CPTO) 6.3.8.6 (#718), allows remote attackers to execute arbitrary code via the Teller field.
Published 2023-12-29 · Modified
6.1EPSS 0.005
CVE-2023-31292
An issue was discovered in Sesami Cash Point & Transport Optimizer (CPTO) 6.3.8.6 (#718), allows local attackers to obtain sensitive information and bypass authentication via "Back Button Refresh" attack.
Published 2023-12-29 · Modified
5.5EPSS 0.002
CVE-2023-31296
CSV Injection vulnerability in Sesami Cash Point & Transport Optimizer (CPTO) version 6.3.8.6 (#718), allows attackers to obtain sensitive information via the User Name field.
Published 2023-12-29 · Modified
5.3EPSS 0.004
CVE-2023-31298
Cross Site Scripting (XSS) vulnerability in Sesami Cash Point & Transport Optimizer (CPTO) version 6.3.8.6 (#718), allows remote attackers to execute arbitrary code and obtain sensitive information via the User ID field when creating a new system user.
Published 2023-12-29 · Modified
4.8EPSS 0.004
CVE-2023-31297
An issue was discovered in SESAMI planfocus CPTO (Cash Point & Transport Optimizer) 6.3.8.6 718. There is XSS via the Name field when modifying a client.
Published 2023-12-25 · Modified
4.8EPSS 0.003
CVE-2023-31293
An issue was discovered in Sesami Cash Point & Transport Optimizer (CPTO) 6.3.8.6 (#718), allows remote attackers to obtain sensitive information and bypass profile restriction via improper access control in the Reader system user's web browser, allowing the journal to be displayed, despite the option being disabled.
Published 2023-12-29 · Modified
4.3EPSS 0.005