Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

TI-2025-02129 CVE-2025-2415 · GHSA-9598-6rg8-g969

OTP Bypass in Akinsoft's MyRezzta

Priority MEDIUM 43

Improper Restriction of Excessive Authentication Attempts vulnerability in Akinsoft MyRezzta allows Authentication Bypass.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00346 Published 2025-09-03 Fixed in v2.05.01 CWE-307
Priority MEDIUM 49

Improper Restriction of Excessive Authentication Attempts vulnerability in Akinsoft MyRezzta allows Authentication Bypass, Password Recovery Exploitation, Brute Force.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00447 Published 2025-09-03 Fixed in v2.05.01 CWE-307
TI-2024-12113 CVE-2024-13065 · GHSA-7p84-xc3f-h4hf

Business Logic Error in Akinsoft's MyRezzta

Priority LOW 27

Improper Enforcement of Behavioral Workflow, Uncontrolled Resource Consumption vulnerability in Akinsoft MyRezzta allows Input Data Manipulation, CAPEC - 125 - Flooding.

CVSS 3.1MEDIUM 6.3 Network No auth User interaction EPSS 0.00196 Published 2025-09-03 Fixed in v2.05.01 CWE-400
TI-2024-12112 CVE-2024-13064 · GHSA-m6h2-hpg8-wccc

XSS in Akinsoft's MyRezzta

Priority LOW 19

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Akinsoft MyRezzta allows Cross-Site Scripting (XSS).

CVSS 3.1MEDIUM 4.3 Network High privileges User interaction EPSS 0.0019 Published 2025-09-03 Fixed in v2.05.01 CWE-79
TI-2024-12111 CVE-2024-13063 · GHSA-4h4r-6vch-g23v

IDOR in Akinsoft's MyRezzta

Priority LOW 29

Authorization Bypass Through User-Controlled Key vulnerability in Akinsoft MyRezzta allows Forceful Browsing.

CVSS 3.1MEDIUM 6.8 Network Low privileges User interaction EPSS 0.00215 Published 2025-09-03 Fixed in v2.05.01 CWE-639