Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: BeyondTrust Component: Beyondinsight Clear all filters
TI-2024-03926 CVE-2024-4220 · GHSA-9fr6-vrhc-9hmv

Information Disclosure in BeyondInsight

Priority LOW 24

Prior to 23.1, an information disclosure vulnerability exists within BeyondInsight which can allow an attacker to enumerate usernames.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00255 Published 2024-06-04 Fixed in 23.1 CWE-200
TI-2024-03925 CVE-2024-4219 · GHSA-wr7j-7cg5-p3pv

SSRF In BeyondInsight

Priority LOW 39

Prior to 23.2, it is possible to perform arbitrary Server-Side requests via HTTP-based connectors within BeyondInsight, resulting in a server-side request forgery vulnerability.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00216 Published 2024-06-04 Fixed in 23.2 CWE-918