Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
iTrack records in CISA KEVNo iTrack vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority MEDIUM 48
Session cookies are not used for maintaining valid sessions in iTrack Easy.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.03021 · Published 2018-07-13 · No fix listed CWE-613
Priority LOW 21
The iTrack device tracking ID number, also called "LosserID" in the web API, can be obtained by being in the range of an iTrack device.
CVSS 3.0LOW 3.7· Network · No auth · No interaction · EPSS 0.01748 · Published 2018-07-13 · No fix listed CWE-200
Open these records in search →