Lucene search
K

10 matches found

EUVD
EUVD
added 2025/12/10 9:31 p.m.1 views

EUVD-2025-202616

Pega Platform versions 7.1.0 through Infinity 25.1.0 are affected by a User Enumeration. This issue occurs during user authentication process, where a difference in response time could allow a remote unauthenticated user to determine if a username is valid or not. This only applies to deprecated...

5.3CVSS6.6AI score0.00036EPSS
Exploits1References2
CVE
CVE
added 2025/12/10 8:41 p.m.5 views

CVE-2025-62181

CVE-2025-62181 affects Pega Platform versions 7.1.0 through Infinity 25.1.0. The issue is a user-enumeration in the authentication process caused by a detectable response-time difference, enabling remote unauthenticated actors to determine if a username exists. The root cause relates to the depre...

5.3CVSS6.8AI score0.00036EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2025/12/10 8:41 p.m.1 views

CVE-2025-62181 Pega Platform versions 7.1.0 through Infinity 25.1.0 are affected by a User Enumeration where during user authentication process, a difference in response time could allow a remote unauthenticated user to determine if a username is valid or not.

Pega Platform versions 7.1.0 through Infinity 25.1.0 are affected by a User Enumeration. This issue occurs during user authentication process, where a difference in response time could allow a remote unauthenticated user to determine if a username is valid or not. This only applies to deprecated...

5.3CVSS6.8AI score0.00036EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2025/12/10 12:0 a.m.2 views

PT-2025-50493

Name of the Vulnerable Software and Affected Versions Pega Platform versions 7.1.0 through Infinity 25.1.0 Description Pega Platform is affected by a User Enumeration issue. A remote unauthenticated user could determine the validity of a username by observing differences in response times during...

5.3CVSS7AI score0.00036EPSS
Exploits1References6
OSV
OSV
added 2016/10/27 9:59 p.m.0 views

CVE-2016-6445

A vulnerability in the Extensible Messaging and Presence Protocol XMPP service of the Cisco Meeting Server CMS before 2.0.6 and Acano Server before 1.8.18 and 1.9.x before 1.9.6 could allow an unauthenticated, remote attacker to masquerade as a legitimate user. This vulnerability is due to the XM...

9.1CVSS5.8AI score
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2004/08/20 12:0 a.m.13 views

SQL Server Cleartext 'probe' Account 'password' Password Authentication (deprecated)

Binary data 1129.prm...

7.3AI score
Exploits0
Tenable Nessus
Tenable Nessus
added 2004/08/20 12:0 a.m.9 views

SQL Server Cleartext 'sql' Account 'sql' Password Authentication (deprecated)

Binary data 1130.prm...

7.3AI score
Exploits0
Tenable Nessus
Tenable Nessus
added 2004/08/20 12:0 a.m.14 views

SQL Server Cleartext 'sa' Account 'sa' Password Authentication (deprecated)

Binary data 1122.prm...

7.3AI score
Exploits0
Tenable Nessus
Tenable Nessus
added 2004/08/20 12:0 a.m.13 views

SQL Server Cleartext 'admin' Account 'administrator' Password Authentication (deprecated)

Binary data 1126.prm...

7.3AI score
Exploits0
Tenable Nessus
Tenable Nessus
added 2004/08/20 12:0 a.m.8 views

SQL Server Cleartext 'sa' Account 'administrator' Password Authentication (deprecated)

Binary data 1124.prm...

7.3AI score
Exploits0
Rows per page
Query Builder