Read the docs

Talya Informatics

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Talya Informatics records in CISA KEV

No Talya Informatics vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2024-00875 CVE-2024-0949 · GHSA-vh95-79cj-7hvx

Improper Access Control in Talya Informatics' Elektraweb

Priority MEDIUM 49

Missing Authentication, Files or Directories Accessible to External Parties, Use of Hard-coded Credentials vulnerability in Talya Informatics Elektraweb allows Authentication Bypass.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00528 Published 2024-06-27 Fixed in v17.0.68 CWE-306
TI-2024-00873 CVE-2024-0947 · GHSA-hp8g-c833-gg8v

Cookies Manipulation in Talya Informatics' Elektraweb

Priority MEDIUM 49

Reliance on Cookies without Validation and Integrity Checking vulnerability in Talya Informatics Elektraweb allows Session Credential Falsification through Manipulation, Accessing/Intercepting/Modifying HTTP Cookies, Man…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00477 Published 2024-06-27 Fixed in v17.0.68 CWE-565
Open these records in search →