CVE-2026-85407

A vulnerability was found in Eleveo Quality Management 9.7.0. This issue affects some unknown processing of the file /enc-fwk-data/api/v3/conversations//events of the component Conversation Handler. The manipulation of the argument labels results in denial of service. The attack can be executed...

CVE-2026-85408

A vulnerability was determined in Eleveo Quality Management 9.7.0. Impacted is an unknown function of the file /enc-fwk-data/api/v3/conversations//events of the component Conversation Handler. This manipulation of the argument createdBy causes dynamically-determined object attributes. The attack ...

CVE-2026-85408 Eleveo Quality Management Conversation events dynamically-determined object attributes

A vulnerability was determined in Eleveo Quality Management 9.7.0. Impacted is an unknown function of the file /enc-fwk-data/api/v3/conversations//events of the component Conversation Handler. This manipulation of the argument createdBy causes dynamically-determined object attributes. The attack ...

CVE-2026-85408 Eleveo Quality Management Conversation events dynamically-determined object attributes

A vulnerability was determined in Eleveo Quality Management 9.7.0. Impacted is an unknown function of the file /enc-fwk-data/api/v3/conversations//events of the component Conversation Handler. This manipulation of the argument createdBy causes dynamically-determined object attributes. The attack ...

CVE-2026-85408

Eleveo Quality Management 9.7.0 is affected in the Conversation Handler component (file /enc-fwk-data/api/v3/conversations//events). Manipulating the createdBy argument causes dynamically-determined object attributes , leading to a low integrity impact with no effect on confidentiality or availab...

EUVD-2026-70882

A vulnerability was determined in Eleveo Quality Management 9.7.0. Impacted is an unknown function of the file /enc-fwk-data/api/v3/conversations//events of the component Conversation Handler. This manipulation of the argument createdBy causes dynamically-determined object attributes. The attack ...

EUVD-2026-70880

A vulnerability was found in Eleveo Quality Management 9.7.0. This issue affects some unknown processing of the file /enc-fwk-data/api/v3/conversations//events of the component Conversation Handler. The manipulation of the argument labels results in denial of service. The attack can be executed...

CVE-2026-85407 Eleveo Quality Management Conversation events denial of service

A vulnerability was found in Eleveo Quality Management 9.7.0. This issue affects some unknown processing of the file /enc-fwk-data/api/v3/conversations//events of the component Conversation Handler. The manipulation of the argument labels results in denial of service. The attack can be executed...

CVE-2026-85407 Eleveo Quality Management Conversation events denial of service

A vulnerability was found in Eleveo Quality Management 9.7.0. This issue affects some unknown processing of the file /enc-fwk-data/api/v3/conversations//events of the component Conversation Handler. The manipulation of the argument labels results in denial of service. The attack can be executed...

CVE-2026-85407

A denial of service vulnerability exists in Eleveo Quality Management 9.7.0 , specifically in the Conversation Handler component at the endpoint /enc-fwk-data/api/v3/conversations//events. Manipulation of the labels argument leads to DoS. The attack is remote and requires low privileges (authenti...

PT-2026-85394

Name of the Vulnerable Software and Affected Versions Eleveo Quality Management version 9.7.0 Description A remote denial of service issue exists in the Conversation Handler component. The problem occurs during the processing of the '/enc-fwk-data/api/v3/conversations//events' endpoint when the...

CVE-2026-85407: Improper Resource Shutdown or Release

A vulnerability was found in Eleveo Quality Management 9.7.0. This issue affects some unknown processing of the file /enc-fwk-data/api/v3/conversations/ /events of the component Conversation Handler. The manipulation of the argument labels results in denial of service. The attack can be executed...

PT-2026-85395

A vulnerability was determined in Eleveo Quality Management 9.7.0. Impacted is an unknown function of the file /enc-fwk-data/api/v3/conversations//events of the component Conversation Handler. This manipulation of the argument createdBy causes dynamically-determined object attributes. The attack ...

CVE-2026-85408: Improperly Controlled Modification of Dynamically-Determined Object Attributes

A vulnerability was determined in Eleveo Quality Management 9.7.0. Impacted is an unknown function of the file /enc-fwk-data/api/v3/conversations/ /events of the component Conversation Handler. This manipulation of the argument createdBy causes dynamically-determined object attributes. The attack...

Eleveo Quality Management processing logic error vulnerability

Eleveo Quality Management version 9.7.0 has a security vulnerability. This vulnerability stems from the operation of the parameter createdBy in the Conversation Handler component, which allows dynamic determination of object properties. This could potentially allow remote attackers to exploit thi...

Eleveo Quality Management Resource Management Error Vulnerability

Eleveo Quality Management version 9.7.0 has a resource management vulnerability. This vulnerability stems from improper handling of the labels parameter in the /enc-fwk-data/api/v3/conversations//events file by the Conversation Handler component, which may lead to a remote denial-of-service attac...

EUVD-2026-67802

R2R through 3.6.5 fails to properly validate user ownership in conversation update and message handlers, allowing authenticated users to modify other users' conversations. Attackers can supply arbitrary conversation identifiers to rename conversations and append messages to other users'...