Empowerid

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Empowerid records in CISA KEV

No Empowerid vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Empowerid 2 records MEDIUM

Records

2 records

TI-2023-21105 CVE-2023-40260 · GHSA-9jcr-7x3f-ch35

EmpowerID before 7.205.0.1 allows an attacker to bypass an MFA (multi factor…

MEDIUM 48

EmpowerID before 7.205.0.1 allows an attacker to bypass an MFA (multi factor authentication) requirement if the first factor (username and password) is known, because the first factor is sufficient to change an account's…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00628 Published 2023-08-11 No fix listed CWE-287

TI-2023-03866 CVE-2023-4177 · GHSA-8984-8j8r-cc3q

EmpowerID Multi-Factor Authentication Code information disclosure

LOW 25

A vulnerability was found in EmpowerID up to 7.205.0.0.

CVSS 3.1MEDIUM 5.7 Adjacent network Low privileges No interaction EPSS 0.00208 Published 2023-08-06 No fix listed CWE-200

Open these records in search →

Critical	1
High	0
Medium	1
Low	0
No CVSS	0