Lucene search
+L

20 matches found

OSV
OSV
•added 2025/12/22 7:15 p.m.•13 views

CVE-2025-63662

Insecure permissions in the /api/v1/agents API of GT Edge AI Platform before v2.0.10-dev allows unauthorized attackers to access sensitive information...

7.5CVSS5.8AI score0.00302EPSS
SaveExploits0References2
NVD
NVD
•added 2025/12/22 7:15 p.m.•16 views

CVE-2025-63664

Incorrect access control in the /api/v1/conversations//messages API of GT Edge AI Platform before v2.0.10-dev allows unauthorized attackers to access other users' message history with AI agents...

7.5CVSS0.00287EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/12/22 12:00 a.m.•5 views

CVE-2025-63663

Incorrect access control in the /api/v1/conversations//files API of GT Edge AI Platform before v2.0.10 allows unauthorized attackers to access other users' uploaded files...

6.4AI score0.00287EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/22 12:00 a.m.•1 views

CVE-2025-63664: Improper Access Control

Incorrect access control in the /api/v1/conversations//messages API of GT Edge AI Platform before v2.0.10-dev allows unauthorized attackers to access other users' message history with AI agents...

7.5CVSS5.8AI score0.00287EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/22 12:00 a.m.•0 views

CVE-2025-63663: Improper Access Control

Incorrect access control in the /api/v1/conversations//files API of GT Edge AI Platform before v2.0.10 allows unauthorized attackers to access other users' uploaded files...

7.5CVSS5.8AI score0.00287EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/12/22 12:00 a.m.•18 views

PT-2025-52672

Name of the Vulnerable Software and Affected Versions GT Edge AI Platform versions prior to 2.0.10 Description An access control issue exists in the /api/v1/conversations//files API of GT Edge AI Platform. This allows unauthorized access to files uploaded by other users. The vulnerable parameter ...

7.5CVSS6.8AI score0.00287EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2025/12/22 12:00 a.m.•26 views

PT-2025-52673

Name of the Vulnerable Software and Affected Versions GT Edge AI Platform versions prior to 2.0.10-dev Description An access control issue exists in the /api/v1/conversations//messages API of GT Edge AI Platform. This allows unauthorized access to message history with AI agents belonging to other...

7.5CVSS6.5AI score0.00287EPSS
SaveExploits0References7
CVE
CVE
•added 2025/12/22 12:00 a.m.•56 views

CVE-2025-63664

The GT Edge AI Platform is vulnerable to an incorrect access control flaw in the /api/v1/conversations/*/messages API endpoint. This vulnerability exists in versions prior to v2.0.10-dev and is caused by issues involving the conversations and messages variables within the API. An unauthorized att...

6.4AI score0.00287EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/22 12:00 a.m.•1 views

CVE-2025-63662: Exposure of Sensitive Information to an Unauthorized Actor

Insecure permissions in the /api/v1/agents API of GT Edge AI Platform before v2.0.10-dev allows unauthorized attackers to access sensitive information...

7.5CVSS5.8AI score0.00302EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/12/22 12:00 a.m.•6 views

CVE-2025-63662

Insecure permissions in the /api/v1/agents API of GT Edge AI Platform before v2.0.10-dev allows unauthorized attackers to access sensitive information...

6.3AI score0.00302EPSS
SaveExploits0References2
CVE
CVE
•added 2025/12/22 12:00 a.m.•26 views

CVE-2025-63662

The GT Edge AI Platform is vulnerable in versions prior to v2.0.10-dev due to insecure permissions in the /api/v1/agents API. This flaw allows unauthorized attackers to access sensitive information via the affected endpoint. To remediate this vulnerability, users should update the GT Edge AI Plat...

6.3AI score0.00302EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2025/12/22 12:00 a.m.•35 views

CVE-2025-63663

Incorrect access control in the /api/v1/conversations//files API of GT Edge AI Platform before v2.0.10 allows unauthorized attackers to access other users' uploaded files...

0.00287EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/12/22 12:00 a.m.•7 views

CVE-2025-63664

Incorrect access control in the /api/v1/conversations//messages API of GT Edge AI Platform before v2.0.10-dev allows unauthorized attackers to access other users' message history with AI agents...

6.4AI score0.00287EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/12/22 12:00 a.m.•12 views

GT Edge AI 安全漏洞

GT Edge AI is an edge AI solution from US-based GT Edge AI. A security vulnerability exists in versions prior to GT Edge AI v2.0.10-dev, which stems from improper /api/v1/agents API permissions, which could lead to unauthorized access to sensitive information...

7.5CVSS6.5AI score0.00302EPSS
SaveExploits0References3
OSV
OSV
•added 2025/12/19 5:15 p.m.•11 views

CVE-2025-63665

An issue in GT Edge AI Community Edition Versions before v2.0.12 allows attackers to execute arbitrary code via injecting a crafted JSON payload into the Prompt window...

9.8CVSS6.2AI score0.00503EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/12/19 12:00 a.m.•6 views

CVE-2025-63665

An issue in GT Edge AI Community Edition Versions before v2.0.12 allows attackers to execute arbitrary code via injecting a crafted JSON payload into the Prompt window...

7.4AI score0.00503EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/19 12:00 a.m.•0 views

CVE-2025-63665: Improper Control of Generation of Code

An issue in GT Edge AI Community Edition Versions before v2.0.12 allows attackers to execute arbitrary code via injecting a crafted JSON payload into the Prompt window...

9.8CVSS6.5AI score0.00503EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/12/19 12:00 a.m.•38 views

CVE-2025-63665

An issue in GT Edge AI Community Edition Versions before v2.0.12 allows attackers to execute arbitrary code via injecting a crafted JSON payload into the Prompt window...

0.00503EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/12/19 12:00 a.m.•14 views

PT-2025-52498

Name of the Vulnerable Software and Affected Versions GT Edge AI Platform versions prior to 2.0.10-dev Description An issue in GT Edge AI Platform allows attackers to execute arbitrary code by injecting a crafted JSON payload into the Prompt window. The vulnerability involves the potential for co...

9.8CVSS7.7AI score0.00503EPSS
SaveExploits0References9
CNNVD
CNNVD
•added 2025/12/19 12:00 a.m.•15 views

GT Edge AI 安全漏洞

GT Edge AI is an edge AI solution from US-based GT Edge AI. A security vulnerability exists in versions prior to GT Edge AI v2.0.10-dev, which originates from the injection of a specially crafted JSON payload that could lead to the execution of arbitrary code...

9.8CVSS7.1AI score0.00503EPSS
SaveExploits0References4
Rows per page
Query Builder