Read the docs

Emudhra

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Emudhra records in CISA KEV

No Emudhra vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Emsigner 3 records HIGH

Records

3 records in Emsigner · all components

TI-2023-23562 CVE-2023-43902 · GHSA-gp56-58fv-r42c

Incorrect access control in the Forgot Your Password function of eMudhra emSigner v2.8.7…

Priority HIGH 76

Incorrect access control in the Forgot Your Password function of eMudhra emSigner v2.8.7 allows unauthenticated attackers to access accounts of all registered users, including those with administrator privileges via a cr…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00835 Published 2023-11-14 No fix listed CWE-640
TI-2023-23560 CVE-2023-43900 · GHSA-r59x-8xcr-cc6w

Insecure Direct Object References (IDOR) in eMudhra emSigner v2.8.7 allow authenticated…

Priority MEDIUM 62

Insecure Direct Object References (IDOR) in eMudhra emSigner v2.8.7 allow authenticated attackers to gain unauthorized access to application content and view sensitive data of other users via manipulation of the document…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00598 Published 2023-11-14 No fix listed CWE-639
Open these records in search →