Openwaygroup

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Openwaygroup records in CISA KEV

No Openwaygroup vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Way4 2 records LOW

Records

2 records in Way4 · all components

TI-2021-14019 CVE-2021-35059 · GHSA-q62v-88vg-xmm5

OpenWay WAY4 ACS before 1.2.278-2693 allows XSS via the /way4acs/enroll action parameter.

LOW 28

OpenWay WAY4 ACS before 1.2.278-2693 allows XSS via the /way4acs/enroll action parameter.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00586 Published 2021-10-11 No fix listed CWE-79

TI-2021-14020 CVE-2021-35060 · GHSA-j379-3r55-f3wq

/way4acs/enroll in OpenWay WAY4 ACS before 1.2.278-2693 allows unauthenticated attackers…

LOW 26

/way4acs/enroll in OpenWay WAY4 ACS before 1.2.278-2693 allows unauthenticated attackers to leverage response differences to discover whether a specific payment card number is stored in the system.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00837 Published 2021-10-11 No fix listed CWE-209

Open these records in search →

Critical	0
High	0
Medium	2
Low	0
No CVSS	0