Vulnerabilities (CVE)

Filtered by vendor Celk Subscribe
Total 3 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2024-48761 1 Celk 1 Celk Saude 2025-05-23 N/A 8.8 HIGH
Reflected XSS vulnerability in Celk Sistemas Celk Saude v.3.1.252.1 allows a remote attacker to inject arbitrary JavaScript code via the "erro" parameter.
CVE-2024-51182 1 Celk 1 Celk Saude 2025-05-23 N/A 6.1 MEDIUM
HTML Injection vulnerability in Celk Sistemas Celk Saude v.3.1.252.1 allows a remote attacker to inject arbitrary HTML code via the "erro" parameter.
CVE-2024-55198 1 Celk 1 Celk Saude 2025-04-03 N/A 5.3 MEDIUM
User Enumeration via Discrepancies in Error Messages in the Celk Sistemas Celk Saude v.3.1.252.1 password recovery functionality which allows a remote attacker to enumerate users through discrepancies in the responses.