Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: CEMI Tomasz Pawełek Clear all filters
TI-2024-04115 CVE-2024-4425 · GHSA-vcx5-gghv-x2hh

Storing credentials in plaintext in CemiPark

Priority LOW 25

The access control in CemiPark software stores integration (e.g.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00394 Published 2024-05-09 No fix listed CWE-256
TI-2024-04114 CVE-2024-4424 · GHSA-33xc-pj2q-h2rm

Stored XSS in CemiPark

Priority LOW 28

The access control in CemiPark software does not properly validate user-entered data, which allows the stored cross-site scripting (XSS) attack.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0043 Published 2024-05-09 No fix listed CWE-79
TI-2024-04113 CVE-2024-4423 · GHSA-wr86-8vhj-7qx5

Authentication bypass in CemiPark

Priority LOW 35

The access control in CemiPark software does not properly validate user-entered data, which allows the authentication bypass.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00907 Published 2024-05-09 No fix listed CWE-89