PT-2022-15941

Name of the Vulnerable Software and Affected Versions Hyland Onbase Application Server versions prior to 20.3.58.1000 Hyland OnBase versions 21.1.1.1000 through 21.1.15.1000 Description The issue allows an attacker to obtain valid users based on the response returned for invalid and valid users b...

CVE-2022-23342: Undefined Security Weakness

The Hyland Onbase Application Server releases prior to 20.3.58.1000 and OnBase releases 21.1.1.1000 through 21.1.15.1000 are vulnerable to a username enumeration vulnerability. An attacker can obtain valid users based on the response returned for invalid and valid users by sending a POST login...