Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Vendor: Meon Clear all filters
TI-2025-27740 CVE-2025-42605 · GHSA-26g6-6369-5jmc

Improper Access Control Vulnerability in Meon Bidding Solutions

Priority MEDIUM 49

This vulnerability exists in Meon Bidding Solutions due to improper authorization controls on certain API endpoints for the initiation, modification, or cancellation operations.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.0049 Published 2025-04-23 No fix listed CWE-639
TI-2025-27738 CVE-2025-42603 · GHSA-w7cv-qc5c-8g8f

Information Disclosure Vulnerability in Meon KYC solutions

Priority MEDIUM 44

This vulnerability exists in the Meon KYC solutions due to transmission of sensitive data in plain text within the response payloads of certain API endpoints.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.0033 Published 2025-04-23 No fix listed CWE-319
TI-2025-27737 CVE-2025-42602 · GHSA-j7h5-c7xg-wp5c

Improper Authentication Vulnerability in Meon KYC solutions

Priority LOW 36

This vulnerability exists in Meon KYC solutions due to improper handling of access and refresh tokens in certain API endpoints of authentication process.

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.00426 Published 2025-04-23 No fix listed CWE-384
TI-2025-27736 CVE-2025-42601 · GHSA-gw5v-3q9m-pxcv

Captcha Bypass Vulnerability in Meon KYC solutions

Priority LOW 36

This vulnerability exists in Meon KYC solutions due to insufficient server-side validation of the Captcha in certain API endpoints.

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.00434 Published 2025-04-23 No fix listed CWE-602
TI-2025-27735 CVE-2025-42600 · GHSA-xjqh-wp4h-xm3r

Brute Force Attack Vulnerability in Meon KYC solutions

Priority MEDIUM 44

This vulnerability exists in Meon KYC solutions due to missing restrictions on the number of incorrect One-Time Password (OTP) attempts through certain API endpoints of login process.

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.00463 Published 2025-04-23 No fix listed CWE-307