Vendors / Gencat Records 2 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0 CVSS 9.0–10.0
CVSS high 0 CVSS 7.0–8.9
Exploited now Gencat records in CISA KEV No Gencat vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority LOW 22
The Java API in accesuniversitat.gencat.cat 1.7.5 allows remote attackers to get personal information of all registered students via several API endpoints.
CVSS 3.1 MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.01105 · Published 2019-12-31 · No fix listed CWE-706
Open these records in search → All records by CVSS severity
Critical0 High0 Medium2 Low0 No CVSS0