TMS Amelia vulnerabilities
8 vulnerabilities
Known vulnerabilities in TMS Amelia, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2026-108497tmsamelia
EPSS score0.24%
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TMS Amelia ameliabooking allows SQL Injection.This issue affects Amelia: from n/a through 2.4.10.CVE-2026-109684tmsameliaEPSS score0.18%
Missing Authorization vulnerability in TMS Amelia ameliabooking allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Amelia: from n/a through 2.4.10.CVE-2024-31425tmsamelia+1EPSS score0.20%
Cross-Site Request Forgery (CSRF) vulnerability in TMS Amelia.This issue affects Amelia: from n/a through 1.0.95.CVE-2024-22298tms-outsourceamelia+2EPSS score0.38%
Missing Authorization vulnerability in TMS Amelia ameliabooking.This issue affects Amelia: from n/a through 1.0.98.CVE-2026-40789tmsamelia+1EPSS score0.42%
Unauthenticated Sensitive Data Exposure in Amelia <= 2.2 versions.CVE-2026-40795tmsamelia+1EPSS score0.30%
Subscriber Broken Access Control in Amelia <= 2.2 versions.CVE-2026-48889tmsamelia+1EPSS score0.42%
Subscriber Privilege Escalation in Amelia <= 2.3 versions.CVE-2026-96461tmsamelia+1EPSS score0.20%
Missing Authorization vulnerability in TMS Amelia ameliabooking allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Amelia: from n/a through 2.4.10.