utarit vulnerabilities

Products

• soliclub 7
• solipay mobile 3
• solipay mobile app 3
• persolus 1

Latest utarit CVEs

Newest publication first

1. CVE-2025-7358 Use of Hard-coded Credentials in Utarit Informatics' SoliClub

   Published 2025-12-18

   Critical·CVSS 9.8 EPSS 0.37%

   Use of Hard-coded Credentials vulnerability in Utarit Informatics Services Inc. SoliClub allows Authentication Abuse. This issue affects SoliClub: before 5.3.7.

2. CVE-2025-7047 Missing Authorization in Utarit Informatics' SoliClub

   Published 2025-12-18

   Medium·CVSS 5.4 EPSS 0.17%

   Missing Authorization vulnerability in Utarit Informatics Services Inc. SoliClub allows Privilege Abuse. This issue affects SoliClub: before 5.3.7.

3. CVE-2025-1031 IDOR in Utarit Informatics' SoliClub

   Published 2025-12-18

   High·CVSS 7.5 EPSS 0.30%

   Authorization Bypass Through User-Controlled Key vulnerability in Utarit Informatics Services Inc. SoliClub allows Functionality Misuse. This issue affects SoliClub: from 5.2.4 before 5.3.7.

4. CVE-2025-1030 Sensitive Data Exposure in Utarit Informatics' SoliClub

   Published 2025-12-18

   High·CVSS 7.5 EPSS 0.30%

   Exposure of Private Personal Information to an Unauthorized Actor vulnerability in Utarit Informatics Services Inc. SoliClub allows Query System for Information. This issue affects SoliClub: from 5.2.4 before 5.3.7.

5. CVE-2025-1029 Hardcoded Credentials in Utarit Informatics' SoliClub

   Published 2025-12-18

   High·CVSS 7.5 EPSS 0.29%

   Use of Hard-coded Credentials vulnerability in Utarit Information Services Inc. SoliClub allows Read Sensitive Constants Within an Executable. This issue affects SoliClub: from 5.2.4 before 5.3.7.

6. CVE-2024-3306 IDOR in Utarit Information's SoliClub

   Published 2024-09-12

   High·CVSS 8.8 EPSS 0.36%

   Authorization Bypass Through User-Controlled Key vulnerability in Utarit Information SoliClub allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects SoliClub: before 4.4.0 for iOS, before 5.2.1 for Android.

7. CVE-2024-3305 IDOR in Utarit Information's SoliClub

   Published 2024-09-12

   High·CVSS 8.8 EPSS 0.39%

   Authorization Bypass Through User-Controlled Key, Missing Authorization vulnerability in Utarit Information SoliClub allows Retrieve Embedded Sensitive Data. This issue affects SoliClub: before 4.4.0 for iOS, before 5.2.1 for Android.

8. CVE-2023-6255 Hardcoded Credentals in SoliClub Mobile App

   Published 2024-02-15

   High·CVSS 7.5 EPSS 0.45%

   Use of Hard-coded Credentials vulnerability in Utarit Information Technologies SoliPay Mobile App allows Read Sensitive Strings Within an Executable. This issue affects SoliPay Mobile App: before 5.0.8.

9. CVE-2023-5155 SQLi in Utarit's Smart Deposit System

   Published 2024-02-15

   Critical·CVSS 9.8 EPSS 0.52%

   Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Utarit Information Technologies SoliPay Mobile App allows SQL Injection. This issue affects SoliPay Mobile App: before 5.0.8.

10. CVE-2023-4993 Sensetive Data Exposure in Utarit's Soliclub

    Published 2024-02-15

    High·CVSS 7.5 EPSS 0.45%

    Incorrect Use of Privileged APIs vulnerability in Utarit Information Technologies SoliPay Mobile App allows Collect Data as Provided by Users. This issue affects SoliPay Mobile App: before 5.0.8.

11. CVE-2023-1152 SQLi in Utarit Persolus

    Published 2023-03-17

    Critical·CVSS 9.8 EPSS 0.62%

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Utarit Information Technologies Persolus allows SQL Injection. This issue affects Persolus: before 2.03.93.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.