Vulnerabilities

TI-2020-07504 CVE-2020-9384 · GHSA-pxrf-6xc9-mc6j

An Insecure Direct Object Reference (IDOR) vulnerability in the Change Password feature…

HIGH 79

An Insecure Direct Object Reference (IDOR) vulnerability in the Change Password feature of Subex ROC Partner Settlement 10.5 allows remote authenticated users to achieve account takeover via manipulation of POST paramete…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01902 Published 2020-04-14 No fix listed CWE-639

TI-2014-07159 CVE-2014-8728 · GHSA-fvqj-jqjq-6m5w

SQL injection vulnerability in the login page (login/login) in Subex ROC Fraud Management…

LOW 35

SQL injection vulnerability in the login page (login/login) in Subex ROC Fraud Management (aka Fraud Management System and FMS) 7.4 and earlier allows remote attackers to execute arbitrary SQL commands via the ranger_use…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01203 Published 2014-12-02 No fix listed CWE-89

Vulnerabilities

Filters

An Insecure Direct Object Reference (IDOR) vulnerability in the Change Password feature…

SQL injection vulnerability in the login page (login/login) in Subex ROC Fraud Management…