Vendors / Temenos Records 4 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0 CVSS 9.0–10.0
CVSS high 3 CVSS 7.0–8.9
Exploited now Temenos records in CISA KEV No Temenos vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 73
An access control issue in Registration.aspx of Temenos CWX 8.5.6 allows authenticated attackers to escalate privileges and perform arbitrary Administrative commands.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00961 · Published 2023-06-21 · No fix listed
Priority MEDIUM 58
Broken access control in the Registration page (/Registration.aspx) of Termenos CWX v8.5.6 allows attackers to access sensitive information.
CVSS 3.1 MEDIUM 5.4· Network · Low privileges · No interaction · EPSS 0.00428 · Published 2023-06-15 · No fix listed CWE-732
Priority MEDIUM 43
An issue was discovered in T24 in TEMENOS Channels R15.01.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.07849 · Published 2019-12-09 · No fix listed CWE-22
Priority LOW 37
Temenos CWX version 8.9 has an Broken Access Control vulnerability in the module /CWX/Employee/EmployeeEdit2.aspx, leading to the viewing of user information.
CVSS 3.0 HIGH 7.5· Network · No auth · No interaction · EPSS 0.01869 · Published 2019-07-17 · No fix listed
Open these records in search → All records by CVSS severity
Critical0 High3 Medium1 Low0 No CVSS0