Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
Lcw2004 records in CISA KEVNo Lcw2004 vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority LOW 39
Incorrect access control in the component /api/user/manager of One v1.0 allows attackers to access sensitive information via a crafted payload.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00385 · Published 2025-05-05 · No fix listed CWE-284
Open these records in search →