Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

9 records

Vendor: GLOBAL PLANNING SOLUTIONS S.L (GPS) Component: Bold Workplanner Clear all filters
TI-2025-27448 CVE-2025-41098 · GHSA-h4jx-296r-rqcc

Insecure Direct Object Reference in GPS BOLD Workplanner

Priority LOW 31

Insecure Direct Object Reference (IDOR) vulnerability in BOLD Workplanner in versions prior to 2.5.25 (4935b438f9b), consisting of a misuse of the general enquiry web service.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00355 Published 2025-09-30 No fix listed CWE-639
TI-2025-27449 CVE-2025-41099 · GHSA-wqfg-5qcm-9r65

Insecure Direct Object Reference in GPS BOLD Workplanner

Priority LOW 31

Insecure Direct Object Reference (IDOR) vulnerability in BOLD Workplanner in versions prior to 2.5.25 (4935b438f9b), consisting of a lack of adequate validation of user input, allowing an authenticated user to access to…

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00323 Published 2025-09-30 No fix listed CWE-639
TI-2025-27447 CVE-2025-41097 · GHSA-x9h4-w3jh-hhf7

Insecure Direct Object Reference in GPS BOLD Workplanner

Priority LOW 31

Insecure Direct Object Reference (IDOR) vulnerability in BOLD Workplanner in versions prior to 2.5.25 (4935b438f9b), consisting of a lack of adequate validation of user input, allowing an authenticated user to access to…

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00256 Published 2025-09-30 No fix listed CWE-639
TI-2025-27446 CVE-2025-41096 · GHSA-28jm-43f2-h9jm

Insecure Direct Object Reference in GPS BOLD Workplanner

Priority LOW 31

Insecure Direct Object Reference (IDOR) vulnerability in BOLD Workplanner in versions prior to 2.5.25 (4935b438f9b), consisting of a lack of adequate validation of user input, allowing an authenticated user to access to…

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00256 Published 2025-09-30 No fix listed CWE-639
TI-2025-27445 CVE-2025-41095 · GHSA-w99j-cv6q-q3w7

Insecure Direct Object Reference in GPS BOLD Workplanner

Priority LOW 31

Insecure Direct Object Reference (IDOR) vulnerability in BOLD Workplanner in versions prior to 2.5.25 (4935b438f9b), consisting of a lack of adequate validation of user input, allowing an authenticated user to access to…

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00256 Published 2025-09-30 No fix listed CWE-639
TI-2025-27444 CVE-2025-41094 · GHSA-j5vg-8wfx-78vq

Insecure Direct Object Reference in GPS BOLD Workplanner

Priority LOW 31

Insecure Direct Object Reference (IDOR) vulnerability in BOLD Workplanner in versions prior to 2.5.25 (4935b438f9b), consisting of a lack of adequate validation of user input, allowing an authenticated user to access to…

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00256 Published 2025-09-30 No fix listed CWE-639
TI-2025-27443 CVE-2025-41093 · GHSA-xv8m-jw66-qjxm

Insecure Direct Object Reference in GPS BOLD Workplanner

Priority LOW 31

Insecure Direct Object Reference (IDOR) vulnerability in BOLD Workplanner in versions prior to 2.5.25 (4935b438f9b), consisting of a lack of adequate validation of user input, allowing an authenticated user to access to…

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00256 Published 2025-09-30 No fix listed CWE-639
TI-2025-27442 CVE-2025-41092 · GHSA-5f4h-2wr9-wfg6

Insecure Direct Object Reference in GPS BOLD Workplanner

Priority LOW 31

Insecure Direct Object Reference (IDOR) vulnerability in BOLD Workplanner in versions prior to 2.5.25 (4935b438f9b), consisting of a lack of adequate validation of user input, allowing an authenticated user to access to…

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00256 Published 2025-09-30 No fix listed CWE-639
TI-2025-27441 CVE-2025-41091 · GHSA-93rh-hccw-9q28

Insecure Direct Object Reference in GPS BOLD Workplanner

Priority LOW 31

Insecure Direct Object Reference (IDOR) vulnerability in BOLD Workplanner in versions prior to 2.5.25 (4935b438f9b), consisting of a lack of adequate validation of user input, allowing an authenticated user to access to…

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00256 Published 2025-09-30 No fix listed CWE-639