Navetti — Vulnerabilities & Security Advisories 4

Navetti develops procurement software solutions for enterprise resource planning systems. Historically, vulnerabilities in their products have commonly included remote code execution, cross-site scripting, and privilege escalation flaws, often stemming from insufficient input validation and access control issues. While no major public security incidents have been widely documented, the four CVEs recorded to date highlight persistent security concerns around authentication bypass and insecure direct object references. Their applications typically handle sensitive financial data, making robust security controls critical to prevent unauthorized access or system compromise.