Vulnerabilities

TI-2021-11915 CVE-2021-31927 · GHSA-3r8c-rqqr-c7h4

An Insecure Direct Object Reference (IDOR) vulnerability in Annex Cloud Loyalty…

LOW 21

An Insecure Direct Object Reference (IDOR) vulnerability in Annex Cloud Loyalty Experience Platform <2021.1.0.1 allows any authenticated attacker to modify any existing user, including users assigned to different environ…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00506 Published 2021-06-10 No fix listed CWE-639

TI-2021-11916 CVE-2021-31928 · GHSA-xcw5-g86x-r42m

Annex Cloud Loyalty Experience Platform <2021.1.0.1 allows any authenticated attacker to…

MEDIUM 40

Annex Cloud Loyalty Experience Platform <2021.1.0.1 allows any authenticated attacker to escalate privileges to superadministrator.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01167 Published 2021-06-10 No fix listed

TI-2021-11917 CVE-2021-31929 · GHSA-4gpf-73j9-3325

Annex Cloud Loyalty Experience Platform <2021.1.0.1 allows any authenticated attacker to…

LOW 21

Annex Cloud Loyalty Experience Platform <2021.1.0.1 allows any authenticated attacker to modify loyalty campaigns and settings, such as fraud prevention, coupon groups, email templates, or referrals.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00506 Published 2021-06-10 No fix listed CWE-732

Vulnerabilities

Filters

An Insecure Direct Object Reference (IDOR) vulnerability in Annex Cloud Loyalty…

Annex Cloud Loyalty Experience Platform <2021.1.0.1 allows any authenticated attacker to…

Annex Cloud Loyalty Experience Platform <2021.1.0.1 allows any authenticated attacker to…