All versions of package abacus-ext-cmdline are vulnerable to Command Injection via the execute function due to improper user-input...
9.8CVSS
9.8AI Score
0.016EPSS
A vulnerability within the authentication process of Abacus ERP allows a remote attacker to bypass the second authentication factor. This issue affects: Abacus ERP v2022 versions prior to R1 of 2022-01-15; v2021 versions prior to R4 of 2022-01-15; v2020 versions prior to R6 of 2022-01-15; v2019...
8.8CVSS
8.7AI Score
0.003EPSS
oauth/oauth2/v1/saml/ in Abacus OAuth Login 2019_01_r4_20191021_0000 before prior to R4 (20.11.2019 Hotfix) allows Reflected Cross Site Scripting (XSS) via an error...
6.1CVSS
6.4AI Score
0.001EPSS