Subex

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Subex records in CISA KEV

No Subex vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Roc Fraud Management System 1 record LOW Roc Partner Settlement 1 record HIGH

Records

2 records

TI-2020-07504 CVE-2020-9384 · GHSA-pxrf-6xc9-mc6j

An Insecure Direct Object Reference (IDOR) vulnerability in the Change Password feature…

HIGH 79

An Insecure Direct Object Reference (IDOR) vulnerability in the Change Password feature of Subex ROC Partner Settlement 10.5 allows remote authenticated users to achieve account takeover via manipulation of POST paramete…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01902 Published 2020-04-14 No fix listed CWE-639

TI-2014-07159 CVE-2014-8728 · GHSA-fvqj-jqjq-6m5w

SQL injection vulnerability in the login page (login/login) in Subex ROC Fraud Management…

LOW 35

SQL injection vulnerability in the login page (login/login) in Subex ROC Fraud Management (aka Fraud Management System and FMS) 7.4 and earlier allows remote attackers to execute arbitrary SQL commands via the ranger_use…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01203 Published 2014-12-02 No fix listed CWE-89

Open these records in search →

Critical	0
High	2
Medium	0
Low	0
No CVSS	0