Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: T-INNOVA Clear all filters
TI-2025-03144 CVE-2025-3575 · GHSA-g288-p356-rj5f

Insecure Direct Object Reference en Deporsite de T-INNOVA

Priority MEDIUM 46

Insecure Direct Object Reference vulnerability in Deporsite from T-INNOVA allows an attacker to retrieve sensitive information from others users via "idUsuario" parameter in "/helper/Familia/establecerUsuarioSeleccion" e…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00478 Published 2025-04-15 No fix listed CWE-639
TI-2025-03143 CVE-2025-3574 · GHSA-m787-xmrc-4c9m

Insecure Direct Object Reference on Deporsite by T-INNOVA

Priority MEDIUM 44

Insecure Direct Object Reference vulnerability in Deporsite from T-INNOVA allows an attacker to retrieve sensitive information from others users via "idUsuario" parameter in "/helper/Familia/obtenerFamiliaUsuario" endpoi…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00478 Published 2025-04-15 No fix listed CWE-639