Vulnerabilities

TI-2019-09616 CVE-2019-12837 · GHSA-84qr-xgvg-w6h2

The Java API in accesuniversitat.gencat.cat 1.7.5 allows remote attackers to get personal…

LOW 22

The Java API in accesuniversitat.gencat.cat 1.7.5 allows remote attackers to get personal information of all registered students via several API endpoints.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.01105 Published 2019-12-31 No fix listed CWE-706

TI-2014-05698 CVE-2014-6862 · GHSA-q4g6-mmfj-8ff8

The ArtAcces (aka cat.gencat.mobi.artacces) application 1.0 for Android does not verify…

LOW 24

The ArtAcces (aka cat.gencat.mobi.artacces) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via…

CVSS 2.0MEDIUM 5.4 Adjacent network No auth Interaction — EPSS 0.00266 Published 2014-10-02 No fix listed CWE-310

Vulnerabilities

Filters

The Java API in accesuniversitat.gencat.cat 1.7.5 allows remote attackers to get personal…

The ArtAcces (aka cat.gencat.mobi.artacces) application 1.0 for Android does not verify…