Read the docs

Next-engine

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Next-engine records in CISA KEV

No Next-engine vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Next Engine Integration 1 record LOW

Records

1 record in Next Engine Integration · all components

TI-2023-12510 CVE-2023-27919 · GHSA-v4hm-xqrg-4qfp

Improper authentication in NEXT ENGINE Integration Plugin

Priority LOW 31

Authentication bypass vulnerability in NEXT ENGINE Integration Plugin (for EC-CUBE 2.0 series) all versions allows a remote unauthenticated attacker to alter the information stored in the system.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.007 Published 2023-05-10 No fix listed CWE-287
Open these records in search →