Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: Naukowa i Akademicka Sieć Komputerowa - Państwowy Instytut Badawczy Clear all filters
TI-2025-03950 CVE-2025-4430 · GHSA-8mxf-4389-q8j9

Unauthorized file manipulation in EZD RP

Priority LOW 39

Unauthorized access to "/api/Token/gettoken" endpoint in EZD RP allows file manipulation.This issue affects EZD RP in versions before 20.19 (published on 22nd August 2024).

CVSS 4.0HIGH 8.6 Network Low privileges No interaction EPSS 0.00354 Published 2025-05-14 Fixed in 20.19 CWE-862
TI-2024-06732 CVE-2024-7267 · GHSA-cq2c-35gp-j9qc

Internal infrastructure data leak in EZD RP

Priority LOW 32

Exposure of Sensitive Information vulnerability in Naukowa i Akademicka Sieć Komputerowa - Państwowy Instytut Badawczy EZD RP allows logged-in user to retrieve information about IP infrastructure and credentials.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00595 Published 2024-08-07 Fixed in 19.6 CWE-213
TI-2024-06731 CVE-2024-7266 · GHSA-5wvf-7fq8-m4w6

Users listing in EZD RP

Priority LOW 31

Incorrect User Management vulnerability in Naukowa i Akademicka Sieć Komputerowa - Państwowy Instytut Badawczy EZD RP allows logged-in user to list all users in the system, including those from other organizations.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00313 Published 2024-08-07 Fixed in 15.84, 16.15 +1 CWE-863
TI-2024-06730 CVE-2024-7265 · GHSA-jvvm-gq28-8rgc

Privilege Escalation in EZD RP

Priority MEDIUM 40

Incorrect User Management vulnerability in Naukowa i Akademicka Sieć Komputerowa - Państwowy Instytut Badawczy EZD RP allows logged-in user to change the password of any user, including root user, which could lead to pri…

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00492 Published 2024-08-07 Fixed in 15.84, 16.15 +1 CWE-863