Search

Find a vulnerability

Search criteria

    4 vulnerabilities found for AVESİS by Abis Technology Ltd. Co.

    CVE-2026-80444 (GCVE-0-2026-80444)

    Vulnerability from nvd – Published: 2026-09-23 11:42 – Updated: 2026-09-23 14:37
    VLAI
    Title
    Unauthenticated Open Redirect Vulnerability in Abis Technology's AVESİS
    Summary
    URL redirection to untrusted site ('open redirect') vulnerability in Abis Technology Ltd. Co. AVESİS allows Input Data Manipulation. This issue affects AVESİS: from 202608201331 before 202608240351.
    Severity
    5.4 (Medium)
    CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
    SSVC
    Exploitation: none Automatable: no Technical Impact: partial
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-09-23 14:37 UTC
    CWE
    • CWE-601 - URL redirection to untrusted site ('open redirect')
    Assigner
    References
    Impacted products
    Vendor Product Version
    Abis Technology Ltd. Co. AVESİS Affected: 202608201331 , < 202608240351 (custom)
    		Create a notification for this product.
    Date Public
    2026-09-23 11:34
    Credits
    Hasan Hüseyin UYAR
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-80444",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-23T14:37:28.642604Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-23T14:37:54.686Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "AVES\u0130S",
          "vendor": "Abis Technology Ltd. Co.",
          "versions": [
            {
              "lessThan": "202608240351",
              "status": "affected",
              "version": "202608201331",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Hasan H\u00fcseyin UYAR"
        }
      ],
      "datePublic": "2026-09-23T11:34:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "URL redirection to untrusted site (\u0027open redirect\u0027) vulnerability in Abis Technology Ltd. Co. AVES\u0130S allows Input Data Manipulation.\u003cp\u003eThis issue affects AVES\u0130S: from 202608201331 before 202608240351.\u003c/p\u003e"
            }
          ],
          "value": "URL redirection to untrusted site (\u0027open redirect\u0027) vulnerability in Abis Technology Ltd. Co. AVES\u0130S allows Input Data Manipulation.\n\nThis issue affects AVES\u0130S: from 202608201331 before 202608240351."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-153",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-153 Input Data Manipulation"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.4,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-601",
              "description": "CWE-601 URL redirection to untrusted site (\u0027open redirect\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-23T11:42:03.590Z",
        "orgId": "ca940d4e-fea4-4aa2-9a58-591a58b1ce21",
        "shortName": "TR-CERT"
      },
      "references": [
        {
          "tags": [
            "government-resource"
          ],
          "url": "https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1159"
        }
      ],
      "source": {
        "advisory": "TR-26-1159",
        "defect": [
          "TR-26-1159"
        ],
        "discovery": "UNKNOWN"
      },
      "title": "Unauthenticated Open Redirect Vulnerability in Abis Technology\u0027s AVES\u0130S",
      "x_generator": {
        "engine": "Vulnogram 1.0.5"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ca940d4e-fea4-4aa2-9a58-591a58b1ce21",
    "assignerShortName": "TR-CERT",
    "cveId": "CVE-2026-80444",
    "datePublished": "2026-09-23T11:42:03.590Z",
    "dateReserved": "2026-08-26T11:41:13.077Z",
    "dateUpdated": "2026-09-23T14:37:54.686Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-7484 (GCVE-0-2026-7484)

    Vulnerability from nvd – Published: 2026-07-24 12:26 – Updated: 2026-07-24 13:46
    VLAI
    Title
    Improper Access Control in Abis Technology's AVESİS
    Summary
    External control of Assumed-Immutable web parameter vulnerability in ABIS Technology Ltd. Co. AVESİS allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects AVESİS: before 202606251646.
    Severity
    5.3 (Medium)
    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
    SSVC
    Exploitation: none Automatable: yes Technical Impact: partial
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-07-24 13:46 UTC
    CWE
    • CWE-472 - External control of Assumed-Immutable web parameter
    Assigner
    References
    Impacted products
    Vendor Product Version
    ABIS Technology Ltd. Co. AVESİS Affected: 0 , < 202606251646 (custom)
    		Create a notification for this product.
    Date Public
    2026-07-24 12:10
    Credits
    Akıner KISA
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-7484",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-24T13:46:47.103607Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-24T13:46:53.759Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "AVES\u0130S",
          "vendor": "ABIS Technology Ltd. Co.",
          "versions": [
            {
              "lessThan": "202606251646",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Ak\u0131ner KISA"
        }
      ],
      "datePublic": "2026-07-24T12:10:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "External control of Assumed-Immutable web parameter vulnerability in ABIS Technology Ltd. Co. AVES\u0130S allows Accessing Functionality Not Properly Constrained by ACLs.\u003cp\u003eThis issue affects AVES\u0130S: before 202606251646.\u003c/p\u003e"
            }
          ],
          "value": "External control of Assumed-Immutable web parameter vulnerability in ABIS Technology Ltd. Co. AVES\u0130S allows Accessing Functionality Not Properly Constrained by ACLs.\n\nThis issue affects AVES\u0130S: before 202606251646."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-1",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-1 Accessing Functionality Not Properly Constrained by ACLs"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-472",
              "description": "CWE-472 External control of Assumed-Immutable web parameter",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-24T12:26:36.257Z",
        "orgId": "ca940d4e-fea4-4aa2-9a58-591a58b1ce21",
        "shortName": "TR-CERT"
      },
      "references": [
        {
          "tags": [
            "government-resource"
          ],
          "url": "https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0634"
        }
      ],
      "source": {
        "advisory": "TR-26-0634",
        "defect": [
          "TR-26-0634"
        ],
        "discovery": "UNKNOWN"
      },
      "title": "Improper Access Control in Abis Technology\u0027s AVES\u0130S",
      "x_generator": {
        "engine": "Vulnogram 1.0.4"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ca940d4e-fea4-4aa2-9a58-591a58b1ce21",
    "assignerShortName": "TR-CERT",
    "cveId": "CVE-2026-7484",
    "datePublished": "2026-07-24T12:26:36.257Z",
    "dateReserved": "2026-04-30T07:07:30.821Z",
    "dateUpdated": "2026-07-24T13:46:53.759Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-80444 (GCVE-0-2026-80444)

    Vulnerability from cvelistv5 – Published: 2026-09-23 11:42 – Updated: 2026-09-23 14:37
    VLAI
    Title
    Unauthenticated Open Redirect Vulnerability in Abis Technology's AVESİS
    Summary
    URL redirection to untrusted site ('open redirect') vulnerability in Abis Technology Ltd. Co. AVESİS allows Input Data Manipulation. This issue affects AVESİS: from 202608201331 before 202608240351.
    Severity
    5.4 (Medium)
    CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
    SSVC
    Exploitation: none Automatable: no Technical Impact: partial
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-09-23 14:37 UTC
    CWE
    • CWE-601 - URL redirection to untrusted site ('open redirect')
    Assigner
    References
    Impacted products
    Vendor Product Version
    Abis Technology Ltd. Co. AVESİS Affected: 202608201331 , < 202608240351 (custom)
    		Create a notification for this product.
    Date Public
    2026-09-23 11:34
    Credits
    Hasan Hüseyin UYAR
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-80444",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-23T14:37:28.642604Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-23T14:37:54.686Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "AVES\u0130S",
          "vendor": "Abis Technology Ltd. Co.",
          "versions": [
            {
              "lessThan": "202608240351",
              "status": "affected",
              "version": "202608201331",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Hasan H\u00fcseyin UYAR"
        }
      ],
      "datePublic": "2026-09-23T11:34:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "URL redirection to untrusted site (\u0027open redirect\u0027) vulnerability in Abis Technology Ltd. Co. AVES\u0130S allows Input Data Manipulation.\u003cp\u003eThis issue affects AVES\u0130S: from 202608201331 before 202608240351.\u003c/p\u003e"
            }
          ],
          "value": "URL redirection to untrusted site (\u0027open redirect\u0027) vulnerability in Abis Technology Ltd. Co. AVES\u0130S allows Input Data Manipulation.\n\nThis issue affects AVES\u0130S: from 202608201331 before 202608240351."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-153",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-153 Input Data Manipulation"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.4,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-601",
              "description": "CWE-601 URL redirection to untrusted site (\u0027open redirect\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-23T11:42:03.590Z",
        "orgId": "ca940d4e-fea4-4aa2-9a58-591a58b1ce21",
        "shortName": "TR-CERT"
      },
      "references": [
        {
          "tags": [
            "government-resource"
          ],
          "url": "https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1159"
        }
      ],
      "source": {
        "advisory": "TR-26-1159",
        "defect": [
          "TR-26-1159"
        ],
        "discovery": "UNKNOWN"
      },
      "title": "Unauthenticated Open Redirect Vulnerability in Abis Technology\u0027s AVES\u0130S",
      "x_generator": {
        "engine": "Vulnogram 1.0.5"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ca940d4e-fea4-4aa2-9a58-591a58b1ce21",
    "assignerShortName": "TR-CERT",
    "cveId": "CVE-2026-80444",
    "datePublished": "2026-09-23T11:42:03.590Z",
    "dateReserved": "2026-08-26T11:41:13.077Z",
    "dateUpdated": "2026-09-23T14:37:54.686Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-7484 (GCVE-0-2026-7484)

    Vulnerability from cvelistv5 – Published: 2026-07-24 12:26 – Updated: 2026-07-24 13:46
    VLAI
    Title
    Improper Access Control in Abis Technology's AVESİS
    Summary
    External control of Assumed-Immutable web parameter vulnerability in ABIS Technology Ltd. Co. AVESİS allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects AVESİS: before 202606251646.
    Severity
    5.3 (Medium)
    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
    SSVC
    Exploitation: none Automatable: yes Technical Impact: partial
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-07-24 13:46 UTC
    CWE
    • CWE-472 - External control of Assumed-Immutable web parameter
    Assigner
    References
    Impacted products
    Vendor Product Version
    ABIS Technology Ltd. Co. AVESİS Affected: 0 , < 202606251646 (custom)
    		Create a notification for this product.
    Date Public
    2026-07-24 12:10
    Credits
    Akıner KISA
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-7484",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-24T13:46:47.103607Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-24T13:46:53.759Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "AVES\u0130S",
          "vendor": "ABIS Technology Ltd. Co.",
          "versions": [
            {
              "lessThan": "202606251646",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Ak\u0131ner KISA"
        }
      ],
      "datePublic": "2026-07-24T12:10:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "External control of Assumed-Immutable web parameter vulnerability in ABIS Technology Ltd. Co. AVES\u0130S allows Accessing Functionality Not Properly Constrained by ACLs.\u003cp\u003eThis issue affects AVES\u0130S: before 202606251646.\u003c/p\u003e"
            }
          ],
          "value": "External control of Assumed-Immutable web parameter vulnerability in ABIS Technology Ltd. Co. AVES\u0130S allows Accessing Functionality Not Properly Constrained by ACLs.\n\nThis issue affects AVES\u0130S: before 202606251646."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-1",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-1 Accessing Functionality Not Properly Constrained by ACLs"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-472",
              "description": "CWE-472 External control of Assumed-Immutable web parameter",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-24T12:26:36.257Z",
        "orgId": "ca940d4e-fea4-4aa2-9a58-591a58b1ce21",
        "shortName": "TR-CERT"
      },
      "references": [
        {
          "tags": [
            "government-resource"
          ],
          "url": "https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0634"
        }
      ],
      "source": {
        "advisory": "TR-26-0634",
        "defect": [
          "TR-26-0634"
        ],
        "discovery": "UNKNOWN"
      },
      "title": "Improper Access Control in Abis Technology\u0027s AVES\u0130S",
      "x_generator": {
        "engine": "Vulnogram 1.0.4"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ca940d4e-fea4-4aa2-9a58-591a58b1ce21",
    "assignerShortName": "TR-CERT",
    "cveId": "CVE-2026-7484",
    "datePublished": "2026-07-24T12:26:36.257Z",
    "dateReserved": "2026-04-30T07:07:30.821Z",
    "dateUpdated": "2026-07-24T13:46:53.759Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}