Floorsightsoftware

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Floorsightsoftware records in CISA KEV

No Floorsightsoftware vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Customer Portal 1 record HIGH Insight 1 record HIGH

Records

1 record in Customer Portal · all components

TI-2023-24641 CVE-2023-45893 · GHSA-5rfq-95qv-rxwp

An indirect Object Reference (IDOR) in the Order and Invoice pages in Floorsight Customer…

HIGH 72

An indirect Object Reference (IDOR) in the Order and Invoice pages in Floorsight Customer Portal Q3 2023 allows an unauthenticated remote attacker to view sensitive customer information.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00578 Published 2024-01-02 No fix listed CWE-639

Open these records in search →

Critical	0
High	2
Medium	0
Low	0
No CVSS	0