Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: CDeX PSA Component: Cdex Clear all filters
TI-2024-02291 CVE-2024-2465 · GHSA-7359-w9jh-qr2r

Open redirection in CDeX

Priority LOW 32

Open redirection vulnerability in CDeX application allows to redirect users to arbitrary websites via a specially crafted URL.This issue affects CDeX application versions through 5.7.1.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00547 Published 2024-03-21 No fix listed CWE-601
TI-2024-02290 CVE-2024-2464 · GHSA-8x54-9cjv-7vch

Application users enumeration in CDeX

Priority LOW 28

This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users.This issue affects CDeX applicat…

CVSS 3.1MEDIUM 6.3 Network Low privileges No interaction EPSS 0.00465 Published 2024-03-21 No fix listed CWE-203
TI-2024-02289 CVE-2024-2463 · GHSA-5444-vc88-hfjh

Weak password recovery in CDeX

Priority HIGH 70

Weak password recovery mechanism in CDeX application allows to retrieve password reset token.This issue affects CDeX application versions through 5.7.1.

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.00598 Published 2024-03-21 No fix listed CWE-640