Ebankit

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Ebankit records in CISA KEV

No Ebankit vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Ebankit 3 records MEDIUM

Records

3 records in Ebankit · all components

TI-2023-14296 CVE-2023-30455 · GHSA-g2fq-w2p2-cg8q

An issue was discovered in ebankIT before 7.

MEDIUM 41

An issue was discovered in ebankIT before 7.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01047 Published 2023-04-28 No fix listed CWE-770

TI-2023-16452 CVE-2023-33291 · GHSA-8rvv-m62r-89wp

In ebankIT 6, the public endpoints /public/token/Email/generate and…

LOW 34

In ebankIT 6, the public endpoints /public/token/Email/generate and /public/token/SMS/generate allow generation of OTP messages to any e-mail address or phone number without validation.

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.00889 Published 2023-05-28 No fix listed CWE-276

TI-2023-14295 CVE-2023-30454 · GHSA-rg92-2hj2-8f47

An issue was discovered in ebankIT before 7.

LOW 28

An issue was discovered in ebankIT before 7.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00535 Published 2023-04-28 No fix listed CWE-79

Open these records in search →

Critical	0
High	2
Medium	1
Low	0
No CVSS	0