Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: Emuse - Eservices / Envoice Project Clear all filters
TI-2021-14860 CVE-2021-36722 · GHSA-7wvg-v832-h9xq

SQL injection in Emuse eServices / eNvoice

Priority MEDIUM 45

Emuse - eServices / eNvoice SQL injection can be used in various ways ranging from bypassing login authentication or dumping the whole database to full RCE on the affected endpoints.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01393 Published 2021-12-29 No fix listed CWE-89
TI-2021-14861 CVE-2021-36723 · GHSA-26hm-c7gj-q5mp

Information disclosure in Emuse eServices / eNvoice

Priority LOW 34

Emuse - eServices / eNvoice Exposure Of Private Personal Information due to lack of identification mechanisms and predictable IDs an attacker can scrape all the files on the service.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00548 Published 2021-12-29 No fix listed CWE-359