Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: 2N Access Commander 3.5 Clear all filters
TI-2025-37237 CVE-2025-59787 · GHSA-mxhf-gjp2-rprv

HTTP 5XX Internal Server Errors

Priority LOW 29

2N Access Commander application version 3.4.2 and prior returns HTTP 500 Internal Server Error responses when receiving malformed or manipulated requests, indicating improper handling of invalid input and potential secur…

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00222 Published 2026-03-04 Fixed in 3.5 CWE-703
TI-2025-37236 CVE-2025-59786 · GHSA-77mj-xgfx-fxp2

Cookies are not Invalidated upon Logout and Password Change

Priority LOW 27

2N Access Commander version 3.4.2 and prior improperly invalidates session tokens, allowing multiple session cookies to remain active after logout in web application.

CVSS 4.0MEDIUM 6.0 Network No auth User interaction EPSS 0.00289 Published 2026-03-04 Fixed in 3.5 CWE-613
TI-2025-37235 CVE-2025-59785 · GHSA-2369-45jq-xgc9

API - Insufficient Input Validation

Priority LOW 29

Improper validation of API end-point in 2N Access Commander version 3.4.2 and prior allows attacker to bypass password policy for backup file encryption.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00207 Published 2026-03-04 Fixed in 3.5 CWE-1286