Incoming Goods Suite

3 CVEs product

Monthly

CVE-2026-22646 MEDIUM This Month

Incoming Goods Suite exposes sensitive internal system information through error messages accessible to authenticated users, enabling attackers to gather reconnaissance data such as file paths and database details for further exploitation. With network accessibility and low complexity requirements, an attacker with valid credentials can leverage this information disclosure to map the application's architecture and identify additional vulnerabilities.

Information Disclosure Incoming Goods Suite
NVD
CVSS 3.1
4.3
EPSS
0.0%
CVE-2026-22645 MEDIUM This Month

Incoming Goods Suite exposes component names, versions, and license details to unauthenticated users, enabling attackers to identify and exploit known vulnerabilities in those dependencies. This information disclosure affects any organization running the application and allows remote adversaries to conduct targeted attacks without authentication.

Information Disclosure Incoming Goods Suite
NVD
CVSS 3.1
5.3
EPSS
0.0%
CVE-2026-22644 MEDIUM This Month

Incoming Goods Suite contains a vulnerability that allows attackers to hijack the user's session and gain unauthorized access (CVSS 5.3).

Authentication Bypass Incoming Goods Suite
NVD
CVSS 3.1
5.3
EPSS
0.0%
EPSS 0% CVSS 4.3
MEDIUM This Month

Incoming Goods Suite exposes sensitive internal system information through error messages accessible to authenticated users, enabling attackers to gather reconnaissance data such as file paths and database details for further exploitation. With network accessibility and low complexity requirements, an attacker with valid credentials can leverage this information disclosure to map the application's architecture and identify additional vulnerabilities.

Information Disclosure Incoming Goods Suite
NVD
EPSS 0% CVSS 5.3
MEDIUM This Month

Incoming Goods Suite exposes component names, versions, and license details to unauthenticated users, enabling attackers to identify and exploit known vulnerabilities in those dependencies. This information disclosure affects any organization running the application and allows remote adversaries to conduct targeted attacks without authentication.

Information Disclosure Incoming Goods Suite
NVD
EPSS 0% CVSS 5.3
MEDIUM This Month

Incoming Goods Suite contains a vulnerability that allows attackers to hijack the user's session and gain unauthorized access (CVSS 5.3).

Authentication Bypass Incoming Goods Suite
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy