Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: ExtremePacs Clear all filters
TI-2024-07296 CVE-2024-7872 · GHSA-9c9c-fvg8-fgwr

Sensetive Data Exposure in ExtremePACS' Extreme XDS

Priority LOW 33

Insertion of Sensitive Information Into Sent Data vulnerability in ExtremePACS Extreme XDS allows Retrieve Embedded Sensitive Data.

CVSS 3.1HIGH 7.6 Adjacent network No auth No interaction EPSS 0.00249 Published 2025-03-06 Fixed in 3933 CWE-201
TI-2024-04043 CVE-2024-4341 · GHSA-qfw8-4q4g-qh9j

IDOR in ExtremePacs's Extreme XDS

Priority LOW 35

Authorization Bypass Through User-Controlled Key, Missing Authorization vulnerability in ExtremePacs Extreme XDS allows Collect Data as Provided by Users.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00288 Published 2024-07-08 Fixed in 3928 CWE-639
TI-2023-05978 CVE-2023-6523 · GHSA-qhq3-q3p4-4fxm

IDOR in ExtremePacs's Extreme XDS

Priority MEDIUM 41

Authorization Bypass Through User-Controlled Key vulnerability in ExtremePacs Extreme XDS allows Authentication Abuse.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00566 Published 2024-04-05 Fixed in 3914 CWE-639
TI-2023-05977 CVE-2023-6522 · GHSA-4965-8838-r53x

Information Disclosure in ExtremePacs's Extreme XDS

Priority LOW 31

Incorrect Use of Privileged APIs vulnerability in ExtremePacs Extreme XDS allows Collect Data as Provided by Users.

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00307 Published 2024-04-05 Fixed in 3914 CWE-648