Read the docs

Emuse - Eservices / Envoice Project

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Emuse - Eservices / Envoice Project records in CISA KEV

No Emuse - Eservices / Envoice Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Emuse - Eservices / Envoice 2 records MEDIUM

Records

2 records

TI-2021-14860 CVE-2021-36722 · GHSA-7wvg-v832-h9xq

SQL injection in Emuse eServices / eNvoice

Priority MEDIUM 45

Emuse - eServices / eNvoice SQL injection can be used in various ways ranging from bypassing login authentication or dumping the whole database to full RCE on the affected endpoints.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01393 Published 2021-12-29 No fix listed CWE-89
TI-2021-14861 CVE-2021-36723 · GHSA-26hm-c7gj-q5mp

Information disclosure in Emuse eServices / eNvoice

Priority LOW 34

Emuse - eServices / eNvoice Exposure Of Private Personal Information due to lack of identification mechanisms and predictable IDs an attacker can scrape all the files on the service.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00548 Published 2021-12-29 No fix listed CWE-359
Open these records in search →