Vulnerabilities > Tylertech > Critical

DATE CVE VULNERABILITY TITLE RISK
2023-11-30 CVE-2023-6342 Improper Authentication vulnerability in Tylertech Court Case Management Plus
Tyler Technologies Court Case Management Plus allows a remote attacker to authenticate as any user by manipulating at least the 'CmWebSearchPfp/Login.aspx?xyzldk=' and 'payforprint_CM/Redirector.ashx?userid=' parameters.
network
low complexity
tylertech CWE-287
critical
9.8
2023-11-30 CVE-2023-6353 Improper Authentication vulnerability in Tylertech Court Case Management Plus
Tyler Technologies Civil and Criminal Electronic Filing allows an unauthenticated, remote attacker to upload, delete, and view files by manipulating the Upload.aspx 'enky' parameter.
network
low complexity
tylertech CWE-287
critical
9.4
2023-11-30 CVE-2023-6354 Improper Authentication vulnerability in Tylertech Court Case Management Plus
Tyler Technologies Magistrate Court Case Management Plus allows an unauthenticated, remote attacker to upload, delete, and view files by manipulating the PDFViewer.aspx 'filename' parameter.
network
low complexity
tylertech CWE-287
critical
9.4