CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

7 matches found

RedhatCVE•added 2025/05/23 9:39 a.m.•12 views

CVE-2024-27455

In the Bentley ALIM Web application, certain configuration settings can cause exposure of a user's ALIM session token when the user attempts to download files. This is fixed in Assetwise ALIM Web 23.00.04.04 and Assetwise Information Integrity Server 23.00.02.03...

9.1CVSS6.8AI score0.0064EPSS

SaveExploits0References1

NVD•added 2024/02/26 4:28 p.m.•20 views

CVE-2024-27455

9.1CVSS6.4AI score0.0064EPSS

SaveExploits0References1

Prion•added 2024/02/26 4:28 p.m.•23 views

Code injection

In the Bentley ALIM Web application, certain configuration settings can cause exposure of a user's ALIM session token when the user attempts to download files. This is fixed in Assetwise ALIM Web 23.00.02.03 and Assetwise Information Integrity Server 23.00.04.04...

7AI score0.0064EPSS

SaveExploits0References1

Cvelist•added 2024/02/26 12:00 a.m.•27 views

CVE-2024-27455

6.7AI score0.0064EPSS

SaveExploits0References1

Vulnrichment•added 2024/02/26 12:00 a.m.•11 views

CVE-2024-27455

6.8AI score0.0064EPSS

SaveExploits0References1

CVE•added 2024/02/26 12:00 a.m.•3871 views

CVE-2024-27455

The Bentley ALIM Web application is vulnerable to a security flaw where specific configuration settings can cause the exposure of a user's ALIM session token when attempting to download files. This issue affects Assetwise ALIM Web versions prior to 23.00.04.04 and Assetwise Information Integrity ...

9.1CVSS6.6AI score0.0064EPSS

SaveExploits0References1

Rapid7 Vulnerability Database (full)•added 2024/02/26 12:00 a.m.•1 views

CVE-2024-27455: Exposure of Data Element to Wrong Session

9.1CVSS5.9AI score0.0064EPSS

SaveExploits0References3

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by