TI-2023-09302 CVE-2023-23460 · GHSA-499w-c4pr-hwwh
Priority Web – Authentication bypass
Priority MEDIUM 50
Priority Web version 19.1.0.68, parameter manipulation on an unspecified end-point may allow authentication bypass.
Priority
Records25All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical7CVSS 9.0–10.0
CVSS high8CVSS 7.0–8.9
Exploited now
Priority records in CISA KEVNo Priority vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
7 records in Priority · all components
TI-2023-09301 CVE-2023-23459 · GHSA-wv7f-jp7g-37rc
Priority Windows – Command Execution via SQL Injection
Priority MEDIUM 50
Priority Windows may allow Command Execution via SQL Injection using an unspecified method.
TI-2024-27759 CVE-2024-41699 · GHSA-2q7v-x8xx-mpjx
Priority – CWE-552: Files or Directories Accessible to External Parties
Priority LOW 33
Priority – CWE-552: Files or Directories Accessible to External Parties
TI-2024-27758 CVE-2024-41698 · GHSA-c3gm-32gm-crw9
Priority – CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
Priority LOW 33
Priority – CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
TI-2022-07329 CVE-2022-23173 · GHSA-g4qr-pvvg-9h2w
Priority - Priority web Insecure direct object references (IDOR)
Priority LOW 29
this vulnerability affect user that even not allowed to access via the web interface.
TI-2024-27757 CVE-2024-41697 · GHSA-f8w7-phwr-8g55
Priority – CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
Priority LOW 27
Priority - CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
TI-2022-07328 CVE-2022-23172 · GHSA-w7v3-573j-vhr9
Priority - Priority User Enumeration
Priority LOW 25
An attacker can access to "Forgot my password" button, as soon as he puts users is valid in the system, the system would issue a message that a password reset email had been sent to user.