Streamsoft Vulnerabilities and Affected Products
Vulnerabilities associated with Streamsoft Prestiż.
Products
Clear product- Streamsoft Prestiż3 vulnerabilities
- Business Intelligence1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2026-0809MEDIUM | Weak KSeF token encoding in Streamsoft PrestiżUse of a custom token encoding algorithm in Streamsoft Prestiż software allows the value of the KSeF (Krajowy System e-Faktur) token to be guessed after analyzing how tokens with know values are encoded. This issue was fixed in version 20.0.380.92. CWE-261Mar 12, 2026 | CVSS6.3v4.0 | EPSS0.249% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2024-7407HIGH | Weak password encoding in Streamsoft PrestiżUse of a custom password encoding algorithm in Streamsoft Prestiż software allows straightforward decoding of passwords using their encoded forms, which are stored in the application's database. One has to know the encoding algorithm, but it can be deduced by observing how password are transformed. This issue was fixed in 18.2.377 version of the software. CWE-261Mar 28, 2025 | CVSS8.2v4.0 | EPSS0.376% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2024-11504HIGH | SQL Injection in Streamsoft PrestiżInput from multiple fields in Streamsoft Prestiż is not sanitized properly, leading to an SQL injection vulnerability, which might be exploited by an authenticated remote attacker. This issue was fixed in 18.1.376.37 version of the software. CWE-89Mar 28, 2025 | CVSS8.6v4.0 | EPSS0.408% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |