syracom AG

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

syracom AG records in CISA KEV

No syracom AG vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Secure Login 3 records MEDIUM

Records

4 records

TI-2023-09088 CVE-2023-22958 · GHSA-x838-8c49-798v

The Syracom Secure Login plugin before 3.1.1.0 for Jira may allow spoofing of 2FA PIN…

MEDIUM 60

The Syracom Secure Login plugin before 3.1.1.0 for Jira may allow spoofing of 2FA PIN validation via the plugins/servlet/twofactor/public/pinvalidation target parameter.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00453 Published 2023-01-11 No fix listed CWE-601

TI-2024-32634 CVE-2024-48942 · GHSA-hqhf-c9cf-w4qm

The Syracom Secure Login (2FA) plugin for Jira, Confluence, and Bitbucket through 3.1.4.5…

MEDIUM 48

The Syracom Secure Login (2FA) plugin for Jira, Confluence, and Bitbucket through 3.1.4.5 allows remote attackers to easily brute-force the 2FA PIN via the plugins/servlet/twofactor/public/pinvalidation endpoint.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00459 Published 2024-10-09 No fix listed CWE-799

TI-2024-32633 CVE-2024-48941 · GHSA-p5f2-h5fv-xrrx

The Syracom Secure Login (2FA) plugin for Jira, Confluence, and Bitbucket through 3.1.4.5…

MEDIUM 47

The Syracom Secure Login (2FA) plugin for Jira, Confluence, and Bitbucket through 3.1.4.5 allows remote attackers to bypass 2FA by interacting with the /rest endpoint of Jira, Confluence, or Bitbucket.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.0034 Published 2024-10-09 No fix listed CWE-266

TI-2026-10517 CVE-2026-12225 · GHSA-xfw8-8p99-43jw

syracom Secure Login (2FA) for Confluence allows 2FA bypass via spoofed User-Agent

MEDIUM 40

syracom AG Secure Login (2FA) for Atlassian Jira, Confluence, and Bitbucket 3.4.0.x contains an authentication bypass vulnerability.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00481 Published 2026-06-16 Fixed in 3.5.0.0 CWE-288

Open these records in search →

Critical	2
High	1
Medium	1
Low	0
No CVSS	0