Vulnerabilities (CVE)

Filtered by vendor Wellchoose Subscribe
Filtered by product Single Sign-on Portal System
Total 3 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2026-1427 1 Wellchoose 1 Single Sign-on Portal System 2026-03-11 N/A 8.8 HIGH
Single Sign-On Portal System developed by WellChoose has a OS Command Injection vulnerability, allowing authenticated remote attackers to inject arbitrary OS commands and execute them on the server.
CVE-2026-1428 1 Wellchoose 1 Single Sign-on Portal System 2026-03-11 N/A 8.8 HIGH
Single Sign-On Portal System developed by WellChoose has a OS Command Injection vulnerability, allowing authenticated remote attackers to inject arbitrary OS commands and execute them on the server.
CVE-2026-1429 1 Wellchoose 1 Single Sign-on Portal System 2026-03-11 N/A 5.4 MEDIUM
Single Sign-On Portal System developed by WellChoose has a Reflected Cross-site Scripting vulnerability, allowing authenticated remote attackers to execute arbitrary JavaScript codes in user's browser through phishing attacks.