Browse all 4 CVE security advisories affecting PruvaSoft Informatics. AI-powered Chinese analysis, POCs, and references for each vulnerability.
PruvaSoft Informatics develops enterprise software solutions with a primary focus on business process automation and data management systems. Historically, their products have been susceptible to remote code execution, cross-site scripting, and privilege escalation vulnerabilities, often stemming from insufficient input validation and access control flaws. The company has recorded four CVEs to date, with notable security characteristics including inconsistent patch release timelines and limited public disclosure of remediation timelines. No major security incidents have been publicly documented, though the persistence of similar vulnerability classes across multiple releases suggests potential gaps in their secure development lifecycle.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2024-5625 | XML External Entity Injection in PruvaSoft Informatics' Apinizer Management Console — Apinizer Management ConsoleCWE-611 | 6.5 | Medium | 2024-07-18 |
| CVE-2024-5620 | Authentication Bypass in PruvaSoft Informatics' Apinizer Management Console — Apinizer Management ConsoleCWE-288 | 6.5 | Medium | 2024-07-18 |
| CVE-2024-5619 | IDOR in PruvaSoft Informatics' Apinizer Management Console — Apinizer Management ConsoleCWE-639 | 9.6 | Critical | 2024-07-18 |
| CVE-2024-5618 | Broken Access Control in PruvaSoft Informatics' Apinizer Management Console — Apinizer Management ConsoleCWE-732 | 9.9 | Critical | 2024-07-18 |
This page lists every published CVE security advisory associated with PruvaSoft Informatics. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.