Lucene search
+L

11 matches found

RedhatCVE
RedhatCVE
•added 2025/05/23 9:01 a.m.•16 views

CVE-2024-38453

The Avalara for Salesforce CPQ app before 7.0 for Salesforce allows attackers to read an API key. NOTE: the current version is 11 as of mid-2024...

7.5CVSS5.9AI score0.00419EPSS
SaveExploits0References1
NVD
NVD
•added 2024/07/03 6:15 a.m.•36 views

CVE-2024-38453

The Avalara for Salesforce CPQ app before 7.0 for Salesforce allows attackers to read an API key. NOTE: the current version is 11 as of mid-2024...

7.5CVSS0.00419EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2024/07/03 12:00 a.m.•19 views

CVE-2024-38453

The Avalara for Salesforce CPQ app before 7.0 for Salesforce allows attackers to read an API key. NOTE: the current version is 11 as of mid-2024...

6.8AI score0.00419EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/07/03 12:00 a.m.•3 views

PT-2024-28010

Name of the Vulnerable Software and Affected Versions Avalara for Salesforce CPQ versions prior to 7.0 Description The issue allows attackers to read an API key. The current version of the app is 11 as of mid-2024. Recommendations For versions prior to 7.0, update to version 7.0 or later to resol...

7.5CVSS0.00419EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2024/07/03 12:00 a.m.•42 views

CVE-2024-38453

The Avalara for Salesforce CPQ app before 7.0 for Salesforce allows attackers to read an API key. NOTE: the current version is 11 as of mid-2024...

0.00419EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/07/03 12:00 a.m.•4 views

CVE-2024-38453: Insufficiently Protected Credentials

The Avalara for Salesforce CPQ app before 7.0 for Salesforce allows attackers to read an API key. NOTE: the current version is 11 as of mid-2024...

7.5CVSS5.8AI score0.00419EPSS
SaveExploits0References1
CVE
CVE
•added 2024/07/03 12:00 a.m.•107 views

CVE-2024-38453

The Avalara for Salesforce CPQ app (versions prior to 7.0 ) contains a security vulnerability that allows an attacker to read an API key . This exposure represents a risk of insufficiently protected credentials . While the current version of the app is listed as 11 as of mid-2024, older installat...

7.5CVSS6.8AI score0.00419EPSS
SaveExploits0References2
Spring Security Advisories
Spring Security Advisories
•added 2023/02/16 12:00 a.m.•37 views

A Bootiful Podcast: Avalara's Kumaresan Muthaliar on GraphQL in the heavily regulated, data intensive domain of tax

Hi, Spring fans! In this installment Josh Long @starbuxman talks to Kumaresan Muthaliar, senior technical lead at Avalara, about GraphQL in the heavily regulated, data intensive domain of tax...

3.4AI score
SaveExploits0
Spring Security Advisories
Spring Security Advisories
•added 2023/02/16 12:00 a.m.•44 views

A Bootiful Podcast: Avalara's Kumaresan Muthaliar on GraphQL in the heavily regulated, data intensive domain of tax

Hi, Spring fans! In this installment Josh Long @starbuxman talks to Kumaresan Muthaliar, senior technical lead at Avalara, about GraphQL in the heavily regulated, data intensive domain of tax...

3.4AI score
SaveExploits0
Openbugbounty
Openbugbounty
•added 2016/12/14 1:15 p.m.•23 views

avalara.com XSS vulnerability

Vulnerable URL: https://www.avalara.com/products/?alert/OPENBUGBOUNTY/...

6.9AI score
SaveExploits0
Openbugbounty
Openbugbounty
•added 2016/12/12 10:45 p.m.•16 views

avalara.com XSS vulnerability

Vulnerable URL: https://www.avalara.com/?qwex'alert/OPENBUGBOUNTY/...

6.9AI score
SaveExploits0
Rows per page
Query Builder