Read the docs

Meon

Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9

Exploited now

Meon records in CISA KEV

No Meon vulnerabilities are listed in CISA KEV.

Records

6 records

TI-2025-27740 CVE-2025-42605 · GHSA-26g6-6369-5jmc

Improper Access Control Vulnerability in Meon Bidding Solutions

Priority MEDIUM 49

This vulnerability exists in Meon Bidding Solutions due to improper authorization controls on certain API endpoints for the initiation, modification, or cancellation operations.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.0049 Published 2025-04-23 No fix listed CWE-639
TI-2025-27738 CVE-2025-42603 · GHSA-w7cv-qc5c-8g8f

Information Disclosure Vulnerability in Meon KYC solutions

Priority MEDIUM 44

This vulnerability exists in the Meon KYC solutions due to transmission of sensitive data in plain text within the response payloads of certain API endpoints.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.0033 Published 2025-04-23 No fix listed CWE-319
TI-2025-27735 CVE-2025-42600 · GHSA-xjqh-wp4h-xm3r

Brute Force Attack Vulnerability in Meon KYC solutions

Priority MEDIUM 44

This vulnerability exists in Meon KYC solutions due to missing restrictions on the number of incorrect One-Time Password (OTP) attempts through certain API endpoints of login process.

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.00463 Published 2025-04-23 No fix listed CWE-307
TI-2025-27737 CVE-2025-42602 · GHSA-j7h5-c7xg-wp5c

Improper Authentication Vulnerability in Meon KYC solutions

Priority LOW 36

This vulnerability exists in Meon KYC solutions due to improper handling of access and refresh tokens in certain API endpoints of authentication process.

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.00426 Published 2025-04-23 No fix listed CWE-384
TI-2025-27736 CVE-2025-42601 · GHSA-gw5v-3q9m-pxcv

Captcha Bypass Vulnerability in Meon KYC solutions

Priority LOW 36

This vulnerability exists in Meon KYC solutions due to insufficient server-side validation of the Captcha in certain API endpoints.

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.00434 Published 2025-04-23 No fix listed CWE-602
Open these records in search →