Skip to main content

Abacre

3 CVEs vendor

Monthly

CVE-2025-67263 Jan 20, 18:16 MEDIUM This Month

Abacre Retail Point of Sale 14.0.0.396 is affected by a stored cross-site scripting (XSS) vulnerability in the Clients module. The application fails to properly sanitize user-supplied input stored in the Name and Surname fields. [CVSS 6.1 MEDIUM]

XSS Retail Point Of Sale Abacre
NVD
CVSS 3.1
6.1
EPSS
0.0%
CVE-2025-67261 Jan 20, 18:16 MEDIUM This Month

Abacre Retail Point of Sale 14.0.0.396 is vulnerable to content-based blind SQL injection. The vulnerability exists in the Search function of the Orders page. [CVSS 6.5 MEDIUM]

SQLi Retail Point Of Sale Abacre
NVD
CVSS 3.1
6.5
EPSS
0.0%
CVE-2025-65320 Dec 03, 16:15 HIGH POC This Week

Abacre Restaurant Point of Sale (POS) up to 15.0.0.1656 are vulnerable to Cleartext Storage of Sensitive Information in Memory. The application leaves valid device-bound license keys in process memory during an activation attempt.

Information Disclosure Restaurant Point Of Sale Abacre
NVD GitHub
CVSS 3.1
7.5
EPSS
0.0%
EPSS 0% CVSS 6.1
MEDIUM This Month

Abacre Retail Point of Sale 14.0.0.396 is affected by a stored cross-site scripting (XSS) vulnerability in the Clients module. The application fails to properly sanitize user-supplied input stored in the Name and Surname fields. [CVSS 6.1 MEDIUM]

XSS Retail Point Of Sale Abacre
NVD
EPSS 0% CVSS 6.5
MEDIUM This Month

Abacre Retail Point of Sale 14.0.0.396 is vulnerable to content-based blind SQL injection. The vulnerability exists in the Search function of the Orders page. [CVSS 6.5 MEDIUM]

SQLi Retail Point Of Sale Abacre
NVD
EPSS 0% CVSS 7.5
HIGH POC This Week

Abacre Restaurant Point of Sale (POS) up to 15.0.0.1656 are vulnerable to Cleartext Storage of Sensitive Information in Memory. The application leaves valid device-bound license keys in process memory during an activation attempt.

Information Disclosure Restaurant Point Of Sale Abacre
NVD GitHub

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy