TI-2024-31470 CVE-2024-47088 · GHSA-6f83-4pfw-m3vj
User Enumeration vulnerability
Priority MEDIUM 49
This vulnerability exists in Apex Softcell LD Geo due to missing restrictions for excessive failed authentication attempts on its API based login.
Apex Softcell
Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9
Exploited now
Apex Softcell records in CISA KEVNo Apex Softcell vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
5 records
TI-2024-31469 CVE-2024-47087 · GHSA-xrp2-m33g-q2cv
Information disclosure in Apex Softcell LD Geo
Priority MEDIUM 44
This vulnerability exists in Apex Softcell LD Geo due to improper validation of the certain parameters (Client ID, DPID or BOID) in the API endpoint.
TI-2024-31468 CVE-2024-47086 · GHSA-vhfh-pcg2-m599
OTP Bypass Vulnerability
Priority MEDIUM 44
This vulnerability exists in Apex Softcell LD DP Back Office due to improper implementation of OTP validation mechanism in certain API endpoints.
TI-2024-31467 CVE-2024-47085 · GHSA-r7mf-5w8w-4x2h
Parameter Manipulation Vulnerability
Priority MEDIUM 44
This vulnerability exists in Apex Softcell LD DP Back Office due to improper validation of certain parameters (cCdslClicentcode and cLdClientCode) in the API endpoint.
TI-2024-31471 CVE-2024-47089 · GHSA-mxf3-c3v5-9jpv
Unauthorized Transaction Manipulation Vulnerability
Priority MEDIUM 43
This vulnerability exists in the Apex Softcell LD Geo due to improper validation of the transaction token ID in the API endpoint.