Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Eic Component: Biyan Clear all filters
TI-2019-08407 CVE-2019-11232 · GHSA-v55f-mqvf-hxcv

EXCELLENT INFOTEK BiYan v1.57 ~ v2.8 allows an attacker to leak user information…

Priority MEDIUM 45

EXCELLENT INFOTEK BiYan v1.57 ~ v2.8 allows an attacker to leak user information (Password) without being authenticated, by sending an EMP_NO element to the kws_login/asp/query_user.asp URI, and then reading the PWD elem…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01533 Published 2019-06-19 No fix listed CWE-287