Logonbox

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Logonbox records in CISA KEV

No Logonbox vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Nervepoint Access Manager 1 record MEDIUM

Records

1 record in Nervepoint Access Manager · all components

TI-2019-04759 CVE-2019-6716 · GHSA-gx48-q3wg-hqgq

An unauthenticated Insecure Direct Object Reference (IDOR) in Wicket Core in LogonBox…

MEDIUM 53

An unauthenticated Insecure Direct Object Reference (IDOR) in Wicket Core in LogonBox Nervepoint Access Manager 2013 through 2017 allows a remote attacker to enumerate internal Active Directory usernames and group names,…

CVSS 3.0CRITICAL 9.4 Network No auth No interaction EPSS 0.09641 Published 2019-03-17 No fix listed CWE-639

Open these records in search →

Critical	1
High	0
Medium	0
Low	0
No CVSS	0