Vulners
Lucene search
| Reporter | Title | Published | Views | Family All 9 |
|---|---|---|---|---|
 | CVE-2021-41554 | 5 Oct 202115:15 | – | attackerkb |
 | CVE-2021-41554 | 5 Oct 202118:30 | – | circl |
 | ARCHIBUS Web Central 安全漏洞 | 5 Oct 202100:00 | – | cnnvd |
 | CVE-2021-41554 | 5 Oct 202115:00 | – | cvelist |
 | CVE-2021-41554 | 5 Oct 202115:15 | – | nvd |
 | CVE-2021-41554 | 5 Oct 202115:15 | – | osv |
 | Code injection | 5 Oct 202115:15 | – | prion |
 | PT-2021-23328 · Archibus · Archibus Web Central | 5 Oct 202100:00 | – | ptsecurity |
 | CVE-2021-41554 | 22 May 202521:21 | – | redhatcve |
Node
| Source | Link |
|---|---|
| gruppotim | www.gruppotim.it/redteam |
| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| username | path | /archibus/schema/ab-edit-users.axvw | Unauthorized access by direct URL allows authenticated users to reach administrative user management functionality and potentially modify user profiles or privileges. | CWE-862 |
| username | path | /archibus/schema/ab-data-dictionary-table.axvw | Direct access to data dictionary endpoints without proper access control may expose sensitive user data or allow privilege escalation. | CWE-862 |
| username | path | /archibus/schema/ab-schema-add-field.axvw | Direct access to schema modification endpoints can bypass authorization checks, enabling manipulation of user-related configuration. | CWE-862 |
| username | path | /archibus/schema/ab-core/views/process-navigator/ab-my-user-profile.axvw | Accessing the user profile page via URL can lead to modification of other users' emails or profiles due to insufficient access control. | CWE-862 |
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
17 Jun 2026 04:08Current
8.4High risk
Vulners AI Score8.4
CVSS 26.5
CVSS 3.18.8
EPSS0.00847