Skip to content
OpenAdvisories

Vendor

Simple

7 known vulnerabilities.

Products

Simple.ERP 4 Wirtualna Uczelnia 3
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.3
    CVE-2026-34906

    Server-Side Template Injection (SSTI) in Wirtualna Uczelnia

    Server-Side Template Injection (SSTI) in Wirtualna Uczelnia allows an unauthenticated attacker to perform Remote Code Execution (RCE). In the endpoint redirectToUrl and parameter redirectUrlParameter, insufficient input validation permits injection of arbitra…

    Simple Wirtualna Uczelnia
  • Critical 9.3
    CVE-2025-12140

    RCE in Wirtualna Uczelnia

    The application contains an insecure 'redirectToUrl' mechanism that incorrectly processes the value of the 'redirectUrlParameter' parameter. The application interprets the entered string of characters as a Java expression, allowing an unauthenticated attacer …

    Simple Wirtualna Uczelnia