[ Vendor · 15 CVEs ]
AM System
CVEs affecting AM System published in the last 30 days, plus any AM System CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-108059 | 3 Nov 2026 | CVSS 5.1 | AM System ALO SuiteA stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality. Insufficient sanitization and encoding of… | |
| CVE-2026-108060 | 3 Nov 2026 | CVSS 5.1 | AM System ALO SuiteA stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality. Insufficient sanitization and encoding of… | |
| CVE-2026-108052 | 3 Nov 2026 | CVSS 5.1 | AM System ALO SuiteA stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality. Insufficient sanitization and encoding of… | |
| CVE-2026-108053 | 3 Nov 2026 | CVSS 5.1 | AM System ALO SuiteA stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality. Insufficient sanitization and encoding of… | |
| CVE-2026-108054 | 3 Nov 2026 | CVSS 5.1 | AM System ALO SuiteA stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality. Insufficient sanitization and encoding of… | |
| CVE-2026-108055 | 3 Nov 2026 | CVSS 5.1 | AM System ALO SuiteA stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality. Insufficient sanitization and encoding of… | |
| CVE-2026-108056 | 3 Nov 2026 | CVSS 5.1 | AM System ALO SuiteA stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality. Insufficient sanitization and encoding of… | |
| CVE-2026-108057 | 3 Nov 2026 | CVSS 5.1 | AM System ALO SuiteA stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality. Insufficient sanitization and encoding of… | |
| CVE-2026-108058 | 3 Nov 2026 | CVSS 5.1 | AM System ALO SuiteA stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality. Insufficient sanitization and encoding of… | |
| CVE-2026-108046 | 3 Nov 2026 | CVSS 6.9 | AM System ALO SuiteDirect Object Reference (IDOR) vulnerability in Alosuite due to insufficient authorization checks when processing object identifiers. By modifying… | |
| CVE-2026-108047 | 3 Nov 2026 | CVSS 8.6 | AM System ALO SuiteInadequate authorization vulnerability in Alosuite’s user invitation functionality. The ‘/Requests/userInvitation’ endpoint does not properly… | |
| CVE-2026-108048 | 3 Nov 2026 | CVSS 6.9 | AM System ALO SuiteVulnerability due to a lack of request limits in Alosuite’s password recovery functionality. The ‘/Account/resetPwd’ endpoint does not enforce… | |
| CVE-2026-108049 | 3 Nov 2026 | CVSS 5.1 | AM System ALO SuiteClickjacking vulnerability in the Alosuite web application. The affected login interface can be embedded in a web page controlled by an attacker… | |
| CVE-2026-108050 | 3 Nov 2026 | CVSS 5.1 | AM System ALO SuiteA stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality. Insufficient sanitization and encoding of… | |
| CVE-2026-108051 | 3 Nov 2026 | CVSS 5.1 | AM System ALO SuiteA stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality. Insufficient sanitization and encoding of… |