Read the docs

CDeX PSA

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

CDeX PSA records in CISA KEV

No CDeX PSA vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Cdex 3 records HIGH

Records

3 records in Cdex · all components

TI-2024-02289 CVE-2024-2463 · GHSA-5444-vc88-hfjh

Weak password recovery in CDeX

Priority HIGH 70

Weak password recovery mechanism in CDeX application allows to retrieve password reset token.This issue affects CDeX application versions through 5.7.1.

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.00598 Published 2024-03-21 No fix listed CWE-640
TI-2024-02291 CVE-2024-2465 · GHSA-7359-w9jh-qr2r

Open redirection in CDeX

Priority LOW 32

Open redirection vulnerability in CDeX application allows to redirect users to arbitrary websites via a specially crafted URL.This issue affects CDeX application versions through 5.7.1.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00547 Published 2024-03-21 No fix listed CWE-601
TI-2024-02290 CVE-2024-2464 · GHSA-8x54-9cjv-7vch

Application users enumeration in CDeX

Priority LOW 28

This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users.This issue affects CDeX applicat…

CVSS 3.1MEDIUM 6.3 Network Low privileges No interaction EPSS 0.00465 Published 2024-03-21 No fix listed CWE-203
Open these records in search →