Threat database

11 threats

Severity	CVSS	Signals	Threat	Source	Published
Medium	5.1	EPSS 0.2%	CVE-2025-40721Quiter Gateway (Java WAR on Apache Tomcat) · XSS or 'Cross-site Scripting' Medium5.1EPSS 0.2%2025-07-08CVE Database V5CVE-2025-40721 Reflected Cross-site Scripting (XSS) vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending a malicious URL trhough the id_factura parameter in /<Client>FacturaE/listado_facturas_ficha.jsp. EPSS 0.2%Vulnerability CWE-79	CVE Database V5	2025-07-08
Medium	5.1	EPSS 0.3%	CVE-2025-40720Quiter Gateway (Java WAR on Apache Tomcat) · XSS or 'Cross-site Scripting' Medium5.1EPSS 0.3%2025-07-08CVE Database V5CVE-2025-40720 Reflected Cross-site Scripting (XSS) vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending a malicious URL trhough the campo parameter in /<Client>FacturaE/VerFacturaPDF. EPSS 0.3%Vulnerability CWE-79	CVE Database V5	2025-07-08
Medium	5.1	EPSS 0.3%	CVE-2025-40719Quiter Gateway (Java WAR on Apache Tomcat) · XSS or 'Cross-site Scripting' Medium5.1EPSS 0.3%2025-07-08CVE Database V5CVE-2025-40719 Reflected Cross-site Scripting (XSS) vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending a malicious URL trhough the id_concesion parameter in /<Client>FacturaE/VerFacturaPDF. EPSS 0.3%Vulnerability CWE-79	CVE Database V5	2025-07-08
Medium	6.9	EPSS 0.4%	CVE-2025-40718Quiter Gateway (Java WAR on Apache Tomcat) · Generation of Error Message Containing Sensitive Information Medium6.9EPSS 0.4%2025-07-08CVE Database V5CVE-2025-40718 Improper error handling vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to send malformed payloads to generate error messages containing sensitive information. EPSS 0.4%Vulnerability CWE-209	CVE Database V5	2025-07-08
Critical	9.3	EPSS 0.5%	CVE-2025-40717Quiter Gateway (Java WAR on Apache Tomcat) · SQL Injection Critical9.3EPSS 0.5%2025-07-08CVE Database V5CVE-2025-40717 SQL injection vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to retrieve, create, update and delete databases through the pagina.filter.categoria mensaje in /QuiterGatewayWeb/api/v1/sucesospagina. EPSS 0.5%Vulnerability CWE-89	CVE Database V5	2025-07-08
Critical	9.3	EPSS 0.5%	CVE-2025-40716Quiter Gateway (Java WAR on Apache Tomcat) · SQL Injection Critical9.3EPSS 0.5%2025-07-08CVE Database V5CVE-2025-40716 SQL injection vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to retrieve, create, update and delete databases through the suceso.contenido mensaje in /QMSCliente/Sucesos.action. EPSS 0.5%Vulnerability CWE-89	CVE Database V5	2025-07-08
Critical	9.3	EPSS 0.5%	CVE-2025-40715Quiter Gateway (Java WAR on Apache Tomcat) · SQL Injection Critical9.3EPSS 0.5%2025-07-08CVE Database V5CVE-2025-40715 SQL injection vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to retrieve, create, update and delete databases through the campo mensaje in /QISClient/api/v1/sucesospaginas. EPSS 0.5%Vulnerability CWE-89	CVE Database V5	2025-07-08
Critical	9.3	EPSS 0.5%	CVE-2025-40714Quiter Gateway (Java WAR on Apache Tomcat) · SQL Injection Critical9.3EPSS 0.5%2025-07-08CVE Database V5CVE-2025-40714 SQL injection vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to retrieve, create, update and delete databases through the campo id_factura in /<Client>FacturaE/listado_facturas_ficha.jsp. EPSS 0.5%Vulnerability CWE-89	CVE Database V5	2025-07-08
Critical	9.3	EPSS 0.5%	CVE-2025-40713Quiter Gateway (Java WAR on Apache Tomcat) · SQL Injection Critical9.3EPSS 0.5%2025-07-08CVE Database V5CVE-2025-40713 SQL injection vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to retrieve, create, update and delete databases through the campo parameter in/<Client>FacturaE/BusquedasFacturasSesion. EPSS 0.5%Vulnerability CWE-89	CVE Database V5	2025-07-08
Critical	9.3	EPSS 0.5%	CVE-2025-40712Quiter Gateway (Java WAR on Apache Tomcat) · SQL Injection Critical9.3EPSS 0.5%2025-07-08CVE Database V5CVE-2025-40712 SQL injection vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to retrieve, create, update and delete databases through the id_concesion parameter in /<Client>FacturaE/DescargarFactura. EPSS 0.5%Vulnerability CWE-89	CVE Database V5	2025-07-08
Critical	9.3	EPSS 0.6%	CVE-2025-40711Quiter Gateway (Java WAR on Apache Tomcat) · SQL Injection Critical9.3EPSS 0.6%2025-07-08CVE Database V5CVE-2025-40711 SQL injection vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to retrieve, create, update and delete databases through the id_concesion parameter in /<Client>FacturaE/VerFacturaPDF. EPSS 0.6%Vulnerability CWE-89	CVE Database V5	2025-07-08

Page 1 of 1