Read the docs

drEryk

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

drEryk records in CISA KEV

No drEryk vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

2 records

TI-2024-03450 CVE-2024-3699 · GHSA-j37r-fj8f-2g89

Hardcoded password in drEryk Gabinet

Priority MEDIUM 42

Use of hard-coded password to the patients' database allows an attacker to retrieve sensitive data stored in the database.

CVSS 4.0CRITICAL 9.3 Local No auth No interaction EPSS 0.00409 Published 2024-06-10 No fix listed CWE-259
Priority LOW 37

DrEryk Gabinet before 11.5.0 uses hard-coded API credentials in its ticket reporting component.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00421 Published 2026-09-10 Fixed in 11.5.0 CWE-798
Open these records in search →