Threat database

10 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
Medium	5.3	EPSS 0.4%	CVE-2026-1621E-Municipality · Authentication bypass by primary weakness Medium5.3EPSS 0.4%2026-08-14CVE Database V5CVE-2026-1621 Authentication bypass by primary weakness vulnerability in Universal Software Inc. E-Municipality allows Exploitation of Trusted Identifiers. This issue affects E-Municipality: from 20251127 before 20260204. EPSS 0.4%Vulnerability Universal Software Inc.#cwe-305	CVE Database V5	2026-08-14
High	8.8	EPSS 0.4%	CVE-2026-7187UKBS · Missing authentication for critical function High8.8EPSS 0.4%2026-07-28CVE Database V5CVE-2026-7187 Missing authentication for critical function vulnerability in Universal Software Inc. UKBS allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects UKBS: through 28072026. NOTE: The vendor was contacted and it was learned that the product is not supported. EPSS 0.4%Vulnerability Universal Software Inc.#cwe-306	CVE Database V5	2026-07-28
Medium	6.5	EPSS 0.3%	CVE-2026-6792FlexCity · Missing Authorization Medium6.5EPSS 0.3%2026-07-21CVE Database V5CVE-2026-6792 Missing Authorization vulnerability in Universal Software Inc. FlexCity allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects FlexCity: from 5.536.0 before 5.542.0. EPSS 0.3%Vulnerability Universal Software Inc.#cwe-862	CVE Database V5	2026-07-21
Medium	4.3	EPSS 0.4%	CVE-2026-8285FlexCity · Improper restriction of excessive authentication attempts Medium4.3EPSS 0.4%2026-07-21CVE Database V5CVE-2026-8285 Improper restriction of excessive authentication attempts vulnerability in Universal Software Inc. FlexCity allows Excessive Allocation. This issue affects FlexCity: from 5.536.0 before 5.542.0. EPSS 0.4%Vulnerability Universal Software Inc.#cwe-307	CVE Database V5	2026-07-21
Medium	6.1	EPSS 0.2%	CVE-2026-8284FlexCity · open redirect Medium6.1EPSS 0.2%2026-07-21CVE Database V5CVE-2026-8284 URL redirection to untrusted site ('open redirect') vulnerability in Universal Software Inc. FlexCity allows Input Data Manipulation. This issue affects FlexCity: from 5.536.0 before 5.542.0. EPSS 0.2%Vulnerability Universal Software Inc.#cwe-601	CVE Database V5	2026-07-21
High	8.3	EPSS 0.3%	CVE-2026-1619FlexCity/Kiosk · Authorization Bypass Through User-Controlled Key High8.3EPSS 0.3%2026-02-13CVE Database V5CVE-2026-1619 Authorization Bypass Through User-Controlled Key vulnerability in Universal Software Inc. FlexCity/Kiosk allows Exploitation of Trusted Identifiers. This issue affects FlexCity/Kiosk: from 1.0 before 1.0.36. EPSS 0.3%Vulnerability Universal Software Inc.#cwe-639	CVE Database V5	2026-02-13
High	8.8	EPSS 0.4%	CVE-2026-1618FlexCity/Kiosk · Authentication Bypass Using an Alternate Path or Channel High8.8EPSS 0.4%2026-02-13CVE Database V5CVE-2026-1618 Authentication Bypass Using an Alternate Path or Channel vulnerability in Universal Software Inc. FlexCity/Kiosk allows Privilege Escalation. This issue affects FlexCity/Kiosk: from 1.0 before 1.0.36. EPSS 0.4%Vulnerability Universal Software Inc.#cwe-288	CVE Database V5	2026-02-13
High	8.8	EPSS 0.4%	CVE-2025-14349FlexCity/Kiosk · Privilege Defined With Unsafe Actions High8.8EPSS 0.4%2026-02-13CVE Database V5CVE-2025-14349 Privilege Defined With Unsafe Actions, Missing Authentication for Critical Function vulnerability in Universal Software Inc. FlexCity/Kiosk allows Accessing Functionality Not Properly Constrained by ACLs, Privilege Escalation. This issue affects FlexCity/Kiosk: from 1.0 before 1.0.36. EPSS 0.4%Vulnerability Universal Software Inc.#cwe-267 #cwe-306	CVE Database V5	2026-02-13
Critical	9.8	EPSS 0.4%	CVE-2024-0857FlexWater Corporate Water Management · SQL Injection Critical9.8EPSS 0.4%2024-07-18CVE Database V5CVE-2024-0857 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Universal Software Inc. FlexWater Corporate Water Management allows SQL Injection. This issue affects FlexWater Corporate Water Management: before 5.452.0. EPSS 0.4%Vulnerability Universal Software Inc.#cwe-89	CVE Database V5	2024-07-18

Showing 1–10 of 10 results · 1 duplicate CVE record merged