Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Vendor: Eic Clear all filters
TI-2021-05721 CVE-2021-22860 · GHSA-whg3-7342-p9mg

EIC e-document system - Broken Authentication

Priority MEDIUM 47

EIC e-document system does not perform completed identity verification for sorting and filtering personnel data.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02558 Published 2021-03-17 No fix listed CWE-287
TI-2021-05720 CVE-2021-22859 · GHSA-x9wv-c8jw-pvg5

EIC e-document system - SQL Injection

Priority MEDIUM 48

The users’ data querying function of EIC e-document system does not filter the special characters which resulted in remote attackers can inject SQL syntax and execute arbitrary commands without privilege.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03751 Published 2021-03-17 No fix listed CWE-89
TI-2019-08407 CVE-2019-11232 · GHSA-v55f-mqvf-hxcv

EXCELLENT INFOTEK BiYan v1.57 ~ v2.8 allows an attacker to leak user information…

Priority MEDIUM 45

EXCELLENT INFOTEK BiYan v1.57 ~ v2.8 allows an attacker to leak user information (Password) without being authenticated, by sending an EMP_NO element to the kws_login/asp/query_user.asp URI, and then reading the PWD elem…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01533 Published 2019-06-19 No fix listed CWE-287