Annexcloud

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Annexcloud records in CISA KEV

No Annexcloud vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Loyalty Experience Platform 3 records MEDIUM

Records

3 records

TI-2021-11916 CVE-2021-31928 · GHSA-xcw5-g86x-r42m

Annex Cloud Loyalty Experience Platform <2021.1.0.1 allows any authenticated attacker to…

MEDIUM 40

Annex Cloud Loyalty Experience Platform <2021.1.0.1 allows any authenticated attacker to escalate privileges to superadministrator.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01167 Published 2021-06-10 No fix listed

TI-2021-11917 CVE-2021-31929 · GHSA-4gpf-73j9-3325

Annex Cloud Loyalty Experience Platform <2021.1.0.1 allows any authenticated attacker to…

LOW 21

Annex Cloud Loyalty Experience Platform <2021.1.0.1 allows any authenticated attacker to modify loyalty campaigns and settings, such as fraud prevention, coupon groups, email templates, or referrals.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00506 Published 2021-06-10 No fix listed CWE-732

TI-2021-11915 CVE-2021-31927 · GHSA-3r8c-rqqr-c7h4

An Insecure Direct Object Reference (IDOR) vulnerability in Annex Cloud Loyalty…

LOW 21

An Insecure Direct Object Reference (IDOR) vulnerability in Annex Cloud Loyalty Experience Platform <2021.1.0.1 allows any authenticated attacker to modify any existing user, including users assigned to different environ…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00506 Published 2021-06-10 No fix listed CWE-639

Open these records in search →

Critical	0
High	1
Medium	2
Low	0
No CVSS	0