Vendors / Primakon Records 7 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 4
Exploited now Primakon records in CISA KEV No Primakon vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 43
Primakon Pi Portal 1.0.18 REST /api/v2/user/register endpoint suffers from a Broken Access Control vulnerability.
CVSS 3.1 HIGH 8.6· Network · No auth · No interaction · EPSS 0.00303 · Published 2025-11-25 · No fix listed CWE-284
Priority MEDIUM 43
Primakon Pi Portal 1.0.18 API endpoints fail to enforce sufficient authorization checks when processing requests.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00406 · Published 2025-11-25 · No fix listed CWE-285
Priority MEDIUM 40
The Primakon Pi Portal 1.0.18 API /api/V2/pp_udfv_admin endpoint, fails to perform necessary server-side validation.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00313 · Published 2025-11-25 · No fix listed CWE-285
Priority MEDIUM 40
Primakon Pi Portal 1.0.18 /api/v2/pp_users endpoint fails to adequately check user permissions before processing a PATCH request to modify the PP_SECURITY_PROFILE_ID.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00313 · Published 2025-11-25 · No fix listed CWE-284
Priority MEDIUM 40
The Primakon Pi Portal 1.0.18 /api/V2/pp_users?email endpoint is used for user data filtering but lacks proper server-side validation against the authenticated session.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00313 · Published 2025-11-25 · No fix listed CWE-285
Priority LOW 30
Primakon Pi Portal 1.0.18 API endpoints responsible for retrieving object-specific or filtered data (e.g., user profiles, project records) fail to implement sufficient server-side validation to confirm that the requestin…
CVSS 3.1 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00248 · Published 2025-11-25 · No fix listed CWE-639
Priority LOW 20
Primakon Pi Portal 1.0.18 /api/v2/users endpoint is vulnerable to unauthorized data exposure due to deficient access control mechanisms.
CVSS 3.1 MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00233 · Published 2025-11-25 · No fix listed CWE-497
Open these records in search → All records by CVSS severity
1 4 2 0 0
THREATIST.IORead the docs