Vulnerabilities

TI-2022-12663 CVE-2022-30496 · GHSA-pqfh-prxf-q634

SQL injection in Logon Page of IDCE MV's application, version 1.0, allows an attacker to…

LOW 35

SQL injection in Logon Page of IDCE MV's application, version 1.0, allows an attacker to inject SQL payloads in the user field, connecting to a database to access enterprise's private and sensitive information.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01292 Published 2022-05-27 No fix listed CWE-89

TI-2020-14515 CVE-2020-23284 · GHSA-jq79-7r7x-wcgv

Information disclosure in aspx pages in MV's IDCE application v1.0 allows an attacker to…

LOW 35

Information disclosure in aspx pages in MV's IDCE application v1.0 allows an attacker to copy and paste aspx pages in the end of the URL application that connect into the database which reveals internal and sensitive inf…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01003 Published 2021-07-20 No fix listed CWE-532

Vulnerabilities

Filters

SQL injection in Logon Page of IDCE MV's application, version 1.0, allows an attacker to…

Information disclosure in aspx pages in MV's IDCE application v1.0 allows an attacker to…