1E Platform vulnerabilities

Latest 1E Platform CVEs

Newest publication first

1. CVE-2024-7211 The Duende Identity Server based component in 1E Platform may allow URL redirections to untrusted websites.

   Published 2024-08-01

   Medium·CVSS 6.1 EPSS 0.24%

   The 1E Platform's component utilized the third-party Duende Identity Server, which suffered from an open redirect vulnerability, permitting an attacker to control the redirection path of end users. Note: 1E Platform's component utilizing the third-party Duende Identity Server has...

2. CVE-2023-45162 Blind SQL vulnerability in 1E platform

   Published 2023-10-13

   Critical·CVSS 9.8 EPSS 0.70%

   Affected 1E Platform versions have a Blind SQL Injection vulnerability that can lead to arbitrary code execution. Application of the relevant hotfix remediates this issue. for v8.1.2 apply hotfix Q23166 for v8.4.1 apply hotfix Q23164 for v9.0.1 apply hotfix Q23169 SaaS implementa...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.