# business_logic


- [CVE-2019-6223](https://insights.sbomify.com/CVE-2019-6223/): Apple iOS and macOS Group Facetime (high 7.5, exploited in the wild)
- [CVE-2025-43200](https://insights.sbomify.com/CVE-2025-43200/): Apple Multiple Products Unspecified (medium 4.2, exploited in the wild)
- [CVE-2001-0981](https://insights.sbomify.com/CVE-2001-0981/): Business logic in n/a (critical 10.0)
- [CVE-2000-0253](https://insights.sbomify.com/CVE-2000-0253/): Business logic in n/a (critical 10.0)
- [CVE-2025-68667](https://insights.sbomify.com/CVE-2025-68667/): Conduit-derived homeservers are affected by a Confused Deputy and Improper Input Validation issue (critical 9.9)
- [CVE-2024-21669](https://insights.sbomify.com/CVE-2024-21669/): Hyperledger Aries Cloud Agent Python result of presentation verification not checked for LDP-VC (critical 9.9)
- [CVE-2022-1680](https://insights.sbomify.com/CVE-2022-1680/): Business logic in GitLab (critical 9.9)
- [CVE-2020-15860](https://insights.sbomify.com/CVE-2020-15860/): Business logic in n/a (critical 9.9)
- [CVE-2026-71644](https://insights.sbomify.com/CVE-2026-71644/): Business logic in n/a (critical 9.8)
- [CVE-2026-14205](https://insights.sbomify.com/CVE-2026-14205/): WP Events Manager < 2.2.5 - Subscriber+ Payment Bypass via 'qty' Parameter (critical 9.8)
- [CVE-2026-68079](https://insights.sbomify.com/CVE-2026-68079/): Apache CXF: DefaultEncryptingCodeDataProvider allows unlimited authorization code replay (critical 9.8)
- [CVE-2026-15043](https://insights.sbomify.com/CVE-2026-15043/): DBI::SQL::Nano versions from 1.42 before 1.651 for Perl have inverted <= and >= SQL operators on text (critical 9.8)

---
From sbomify Insights: https://insights.sbomify.com/types/business-logic/