Lucene search
+L

23 matches found

RedhatCVE
RedhatCVE
•added 2025/12/23 12:25 a.m.•39 views

CVE-2025-63663

Incorrect access control in the /api/v1/conversations//files API of GT Edge AI Platform before v2.0.10 allows unauthorized attackers to access other users' uploaded files...

7.5CVSS6.8AI score0.00287EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/12/23 12:25 a.m.•28 views

CVE-2025-63662

Insecure permissions in the /api/v1/agents API of GT Edge AI Platform before v2.0.10-dev allows unauthorized attackers to access sensitive information...

7.5CVSS5.8AI score0.00302EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/12/22 9:30 p.m.•19 views

EUVD-2025-204739

Incorrect access control in the /api/v1/conversations//files API of GT Edge AI Platform before v2.0.10 allows unauthorized attackers to access other users' uploaded files...

7.5CVSS6.3AI score0.00287EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/12/22 9:30 p.m.•20 views

EUVD-2025-204740

Insecure permissions in the /api/v1/agents API of GT Edge AI Platform before v2.0.10-dev allows unauthorized attackers to access sensitive information...

5.8AI score0.00302EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/12/22 9:30 p.m.•24 views

EUVD-2025-204736

Incorrect access control in the /api/v1/conversations//messages API of GT Edge AI Platform before v2.0.10-dev allows unauthorized attackers to access other users' message history with AI agents...

7.5CVSS5.8AI score0.00287EPSS
SaveExploits0References3
OSV
OSV
•added 2025/12/22 7:15 p.m.•20 views

CVE-2025-63663

Incorrect access control in the /api/v1/conversations//files API of GT Edge AI Platform before v2.0.10 allows unauthorized attackers to access other users' uploaded files...

7.5CVSS5.8AI score0.00287EPSS
SaveExploits0References2
NVD
NVD
•added 2025/12/22 7:15 p.m.•15 views

CVE-2025-63662

Insecure permissions in the /api/v1/agents API of GT Edge AI Platform before v2.0.10-dev allows unauthorized attackers to access sensitive information...

7.5CVSS0.00302EPSS
SaveExploits0References2
OSV
OSV
•added 2025/12/22 7:15 p.m.•20 views

CVE-2025-63664

Incorrect access control in the /api/v1/conversations//messages API of GT Edge AI Platform before v2.0.10-dev allows unauthorized attackers to access other users' message history with AI agents...

7.5CVSS5.8AI score0.00287EPSS
SaveExploits0References2
NVD
NVD
•added 2025/12/22 7:15 p.m.•22 views

CVE-2025-63663

Incorrect access control in the /api/v1/conversations//files API of GT Edge AI Platform before v2.0.10 allows unauthorized attackers to access other users' uploaded files...

7.5CVSS0.00287EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/12/22 12:00 a.m.•41 views

CVE-2025-63662

Insecure permissions in the /api/v1/agents API of GT Edge AI Platform before v2.0.10-dev allows unauthorized attackers to access sensitive information...

0.00302EPSS
SaveExploits0References2
CVE
CVE
•added 2025/12/22 12:00 a.m.•54 views

CVE-2025-63663

The GT Edge AI Platform is vulnerable to an improper access control issue in the /api/v1/conversations/*/files API endpoint, affecting versions prior to v2.0.10 . The root cause is an insufficient check on the file identifier parameter, which allows unauthorized attackers to access files uploaded...

7.5CVSS5.8AI score0.00287EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2025/12/22 12:00 a.m.•17 views

PT-2025-52671

Name of the Vulnerable Software and Affected Versions GT Edge AI Platform versions prior to 2.0.10-dev Description The /api/v1/agents API in GT Edge AI Platform has insecure permissions, potentially allowing unauthorized access to sensitive information. The API endpoint ''/api/v1/agents'' is...

7.5CVSS5.7AI score0.00302EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/22 12:00 a.m.•5 views

CVE-2025-63664: Improper Access Control

Incorrect access control in the /api/v1/conversations//messages API of GT Edge AI Platform before v2.0.10-dev allows unauthorized attackers to access other users' message history with AI agents...

7.5CVSS5.8AI score0.00287EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/22 12:00 a.m.•5 views

CVE-2025-63662: Exposure of Sensitive Information to an Unauthorized Actor

Insecure permissions in the /api/v1/agents API of GT Edge AI Platform before v2.0.10-dev allows unauthorized attackers to access sensitive information...

7.5CVSS5.8AI score0.00302EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/22 12:00 a.m.•6 views

CVE-2025-63663: Improper Access Control

Incorrect access control in the /api/v1/conversations//files API of GT Edge AI Platform before v2.0.10 allows unauthorized attackers to access other users' uploaded files...

7.5CVSS5.8AI score0.00287EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/12/22 12:00 a.m.•38 views

CVE-2025-63663

Incorrect access control in the /api/v1/conversations//files API of GT Edge AI Platform before v2.0.10 allows unauthorized attackers to access other users' uploaded files...

0.00287EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/12/20 12:12 a.m.•30 views

CVE-2025-63665

An issue in GT Edge AI Community Edition Versions before v2.0.12 allows attackers to execute arbitrary code via injecting a crafted JSON payload into the Prompt window...

9.8CVSS7.8AI score0.00503EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/12/19 6:31 p.m.•18 views

EUVD-2025-204583

An issue in GT Edge AI Platform Versions before v2.0.10-dev allows attackers to execute arbitrary code via injecting a crafted JSON payload into the Prompt window...

9.8CVSS7.3AI score0.00503EPSS
SaveExploits0References3
NVD
NVD
•added 2025/12/19 5:15 p.m.•19 views

CVE-2025-63665

An issue in GT Edge AI Community Edition Versions before v2.0.12 allows attackers to execute arbitrary code via injecting a crafted JSON payload into the Prompt window...

9.8CVSS0.00503EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/12/19 12:00 a.m.•41 views

CVE-2025-63665

An issue in GT Edge AI Community Edition Versions before v2.0.12 allows attackers to execute arbitrary code via injecting a crafted JSON payload into the Prompt window...

0.00503EPSS
SaveExploits0References2
Rows per page
Query Builder