Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Talya Informatics Elektraweb v17.0.68 Clear all filters
TI-2024-00875 CVE-2024-0949 · GHSA-vh95-79cj-7hvx

Improper Access Control in Talya Informatics' Elektraweb

Priority MEDIUM 49

Missing Authentication, Files or Directories Accessible to External Parties, Use of Hard-coded Credentials vulnerability in Talya Informatics Elektraweb allows Authentication Bypass.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00528 Published 2024-06-27 Fixed in v17.0.68 CWE-306
TI-2024-00873 CVE-2024-0947 · GHSA-hp8g-c833-gg8v

Cookies Manipulation in Talya Informatics' Elektraweb

Priority MEDIUM 49

Reliance on Cookies without Validation and Integrity Checking vulnerability in Talya Informatics Elektraweb allows Session Credential Falsification through Manipulation, Accessing/Intercepting/Modifying HTTP Cookies, Man…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00477 Published 2024-06-27 Fixed in v17.0.68 CWE-565