CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

2 matches found

Cvelist•added 2021/12/20 8:08 p.m.•41 views

CVE-2021-35248 Unrestricted access to Orion.UserSettings SWIS entity for low-privilege users

It has been reported that any Orion user, e.g. guest accounts can query the Orion.UserSettings entity and enumerate users and their basic settings...

6.8CVSS6.9AI score0.00886EPSS

SaveExploits0References3

Rapid7 Vulnerability Database (full)•added 2021/12/20 12:00 a.m.•4 views

CVE-2021-35248: Incorrect Permission Assignment for Critical Resource

It has been reported that any Orion user, e.g. guest accounts can query the Orion.UserSettings entity and enumerate users and their basic settings...

6.8CVSS5.7AI score0.00886EPSS

SaveExploits0References3

Rows per page

Family

Bulletin Type

Min CVSS Score

Date

Order by