Skip to content
COOEY

FAIL › dossier

caterease

PRODUCT

· dossier confidence 20%

PROFILE
CategoryProductWhat they doCaterease is a product developed by Horizon Business Services Inc., which is used for managing and processing data within various business environments. Websitehttps://www.caterease.com/ ↗
SECURITY POSTURE

The security posture of Caterease appears to be compromised due to multiple critical vulnerabilities being discovered and publicly disclosed.

Notable failures
  • CVE-2024-38889: A critical SQL Injection vulnerability affecting versions 16.0.1.1663 through 24.0.1.2405 and possibly later.
  • CVE-2024-38887: A critical RCE (Remote Code Execution) vulnerability affecting versions 16.0.1.1663 through 24.0.1.2405 and possibly later.
  • CVE-2024-38886: A critical Traffic Injection vulnerability affecting versions 16.0.1.1663 through 24.0.1.2405 and possibly later.
Patterns: Repeated unpatched edge-device RCEs; SQL Injection vulnerabilities; Traffic Injection vulnerabilities
FAILURE HISTORY · 3
DATEEVENTSEVSUMMARY
2024-08-02 CVE-2024-38889 critical An issue in Horizon Business Services Inc. Caterease 16.0.1.1663 through 24.0.1.2405 and possibly later versions, allows a remote attacker to perform SQL Injection due to improper neutralization of special elements used in an SQL command.
2024-08-02 CVE-2024-38887 critical An issue in Horizon Business Services Inc. Caterease 16.0.1.1663 through 24.0.1.2405 and possibly later versions, allows a remote attacker to expand control over the operating system from the database due to the execution of commands with unnecessary privileges.
2024-08-02 CVE-2024-38886 critical An issue in Horizon Business Services Inc. Caterease 16.0.1.1663 through 24.0.1.2405 and possibly later versions, allows a remote attacker to perform a Traffic Injection attack due to improper verification of the source of a communication channel.
Open questions: What is the current size and ownership structure of Caterease? · What is the current headquarters location of Caterease?
DOSSIER · dex-RAG synthesis · grounded in our own collection + trusted sourcesbuilt 2026-08-07 03:41:39.461567+00:00