Lucene search
+L

2 matches found

OSV
OSV
added 2019/09/05 6:15 p.m.5 views

CVE-2019-14278

In Knowage through 6.1.1, an unauthenticated user can enumerated valid usernames via the ChangePwdServlet page...

5.3CVSS6AI score0.01152EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2019/08/28 4:15 p.m.5 views

CVE-2019-13189

In Knowage through 6.1.1, there is XSS via the starturl or userid field to the ChangePwdServlet page...

6.1CVSS5.4AI score0.00943EPSS
SaveExploits1References2
Rows per page
Query Builder