CVE-2024-8643

CRITICAL

9.8

CVSS Severity Score

EPSS Score0.1410%

EPSS Percentile43.99th

PublishedSep 27, 2024

Last ModifiedJun 2, 2026

Vulnerability Description

Session Fixation vulnerability in Oceanic Software ValeApp allows Brute Force, Session Hijacking. This issue affects ValeApp: before v2.0.0.

📦

Oceanicsoft

< 2.0.0

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Oceanic Software ValeApp all...

Insertion of Sensitive Information into Log File vulnerability in Oceanic Software ValeApp allows Query System for Information. T...

Cleartext Storage of Sensitive Information in a Cookie vulnerability in Oceanic Software ValeApp allows Protocol Manipulation, : J...

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Oceanic Software Vale...