Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Vendor: Apex Softcell Clear all filters
TI-2024-31471 CVE-2024-47089 · GHSA-mxf3-c3v5-9jpv

Unauthorized Transaction Manipulation Vulnerability

Priority MEDIUM 43

This vulnerability exists in the Apex Softcell LD Geo due to improper validation of the transaction token ID in the API endpoint.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00227 Published 2024-09-19 Fixed in 4.0.0.7 CWE-354
TI-2024-31470 CVE-2024-47088 · GHSA-6f83-4pfw-m3vj

User Enumeration vulnerability

Priority MEDIUM 49

This vulnerability exists in Apex Softcell LD Geo due to missing restrictions for excessive failed authentication attempts on its API based login.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00564 Published 2024-09-19 Fixed in 4.0.0.7 CWE-307
TI-2024-31469 CVE-2024-47087 · GHSA-xrp2-m33g-q2cv

Information disclosure in Apex Softcell LD Geo

Priority MEDIUM 44

This vulnerability exists in Apex Softcell LD Geo due to improper validation of the certain parameters (Client ID, DPID or BOID) in the API endpoint.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00436 Published 2024-09-19 Fixed in 4.0.0.7 CWE-359
TI-2024-31468 CVE-2024-47086 · GHSA-vhfh-pcg2-m599

OTP Bypass Vulnerability

Priority MEDIUM 44

This vulnerability exists in Apex Softcell LD DP Back Office due to improper implementation of OTP validation mechanism in certain API endpoints.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00474 Published 2024-09-19 Fixed in 24.8.21.1 CWE-302
TI-2024-31467 CVE-2024-47085 · GHSA-r7mf-5w8w-4x2h

Parameter Manipulation Vulnerability

Priority MEDIUM 44

This vulnerability exists in Apex Softcell LD DP Back Office due to improper validation of certain parameters (cCdslClicentcode and cLdClientCode) in the API endpoint.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00436 Published 2024-09-19 Fixed in 24.8.21.1 CWE-359