Vulnerabilities

TI-2024-00709 CVE-2024-0770 · GHSA-3cm5-j5r2-wvm7

European Chemicals Agency IUCLID Desktop Installer iuclid6.exe default permission

MEDIUM 64

A vulnerability, which was classified as critical, was found in European Chemicals Agency IUCLID 7.10.3 on Windows.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00278 Published 2024-01-21 No fix listed CWE-276

TI-2023-11683 CVE-2023-26546 · GHSA-3r37-p8j6-6wp6

European Chemicals Agency IUCLID before 6.27.6 allows remote authenticated users to…

MEDIUM 43

European Chemicals Agency IUCLID before 6.27.6 allows remote authenticated users to execute arbitrary code via Server Side Template Injection (SSTI) with a crafted template file.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0144 Published 2023-05-02 No fix listed CWE-94

TI-2023-11317 CVE-2023-26089 · GHSA-29gh-89p4-ffqv

European Chemicals Agency IUCLID 6.x before 6.27.6 allows authentication bypass because a…

MEDIUM 51

European Chemicals Agency IUCLID 6.x before 6.27.6 allows authentication bypass because a weak hard-coded secret is used for JWT signing.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01073 Published 2023-05-02 No fix listed CWE-798

Vulnerabilities

Filters

European Chemicals Agency IUCLID Desktop Installer iuclid6.exe default permission

European Chemicals Agency IUCLID before 6.27.6 allows remote authenticated users to…

European Chemicals Agency IUCLID 6.x before 6.27.6 allows authentication bypass because a…