Lucene search
+L

23 matches found

RedhatCVE
RedhatCVE
•added 2025/12/23 12:25 a.m.•34 views

CVE-2025-63663

Incorrect access control in the /api/v1/conversations//files API of GT Edge AI Platform before v2.0.10 allows unauthorized attackers to access other users' uploaded files...

7.5CVSS6.8AI score0.00287EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/12/23 12:25 a.m.•22 views

CVE-2025-63662

Insecure permissions in the /api/v1/agents API of GT Edge AI Platform before v2.0.10-dev allows unauthorized attackers to access sensitive information...

7.5CVSS6.7AI score0.00302EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/12/22 9:30 p.m.•19 views

EUVD-2025-204736

Incorrect access control in the /api/v1/conversations//messages API of GT Edge AI Platform before v2.0.10-dev allows unauthorized attackers to access other users' message history with AI agents...

7.5CVSS6.3AI score0.00287EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/12/22 9:30 p.m.•17 views

EUVD-2025-204740

Insecure permissions in the /api/v1/agents API of GT Edge AI Platform before v2.0.10-dev allows unauthorized attackers to access sensitive information...

6.2AI score0.00302EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/12/22 9:30 p.m.•13 views

EUVD-2025-204739

Incorrect access control in the /api/v1/conversations//files API of GT Edge AI Platform before v2.0.10 allows unauthorized attackers to access other users' uploaded files...

7.5CVSS6.3AI score0.00287EPSS
SaveExploits0References3
OSV
OSV
•added 2025/12/22 7:15 p.m.•16 views

CVE-2025-63664

Incorrect access control in the /api/v1/conversations//messages API of GT Edge AI Platform before v2.0.10-dev allows unauthorized attackers to access other users' message history with AI agents...

7.5CVSS5.8AI score0.00287EPSS
SaveExploits0References2
NVD
NVD
•added 2025/12/22 7:15 p.m.•12 views

CVE-2025-63662

Insecure permissions in the /api/v1/agents API of GT Edge AI Platform before v2.0.10-dev allows unauthorized attackers to access sensitive information...

7.5CVSS0.00302EPSS
SaveExploits0References2
NVD
NVD
•added 2025/12/22 7:15 p.m.•17 views

CVE-2025-63663

Incorrect access control in the /api/v1/conversations//files API of GT Edge AI Platform before v2.0.10 allows unauthorized attackers to access other users' uploaded files...

7.5CVSS0.00287EPSS
SaveExploits0References2
OSV
OSV
•added 2025/12/22 7:15 p.m.•16 views

CVE-2025-63663

Incorrect access control in the /api/v1/conversations//files API of GT Edge AI Platform before v2.0.10 allows unauthorized attackers to access other users' uploaded files...

7.5CVSS5.8AI score0.00287EPSS
SaveExploits0References2
CVE
CVE
•added 2025/12/22 12:00 a.m.•48 views

CVE-2025-63663

The GT Edge AI Platform is vulnerable to an incorrect access control flaw in the /api/v1/conversations/*/files API, affecting versions prior to v2.0.10 . An unauthorized attacker can exploit this by targeting the file identifier parameter within the API endpoint to access files uploaded by other ...

6.4AI score0.00287EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2025/12/22 12:00 a.m.•38 views

CVE-2025-63662

Insecure permissions in the /api/v1/agents API of GT Edge AI Platform before v2.0.10-dev allows unauthorized attackers to access sensitive information...

0.00302EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/22 12:00 a.m.•1 views

CVE-2025-63664: Improper Access Control

Incorrect access control in the /api/v1/conversations//messages API of GT Edge AI Platform before v2.0.10-dev allows unauthorized attackers to access other users' message history with AI agents...

7.5CVSS5.8AI score0.00287EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/22 12:00 a.m.•0 views

CVE-2025-63663: Improper Access Control

Incorrect access control in the /api/v1/conversations//files API of GT Edge AI Platform before v2.0.10 allows unauthorized attackers to access other users' uploaded files...

7.5CVSS5.8AI score0.00287EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/12/22 12:00 a.m.•14 views

PT-2025-52671

Name of the Vulnerable Software and Affected Versions GT Edge AI Platform versions prior to 2.0.10-dev Description The /api/v1/agents API in GT Edge AI Platform has insecure permissions, potentially allowing unauthorized access to sensitive information. The API endpoint ''/api/v1/agents'' is...

7.5CVSS6.6AI score0.00302EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/22 12:00 a.m.•1 views

CVE-2025-63662: Exposure of Sensitive Information to an Unauthorized Actor

Insecure permissions in the /api/v1/agents API of GT Edge AI Platform before v2.0.10-dev allows unauthorized attackers to access sensitive information...

7.5CVSS5.8AI score0.00302EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/12/22 12:00 a.m.•35 views

CVE-2025-63663

Incorrect access control in the /api/v1/conversations//files API of GT Edge AI Platform before v2.0.10 allows unauthorized attackers to access other users' uploaded files...

0.00287EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/12/20 12:12 a.m.•24 views

CVE-2025-63665

An issue in GT Edge AI Community Edition Versions before v2.0.12 allows attackers to execute arbitrary code via injecting a crafted JSON payload into the Prompt window...

9.8CVSS7.8AI score0.00503EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/12/19 6:31 p.m.•16 views

EUVD-2025-204583

An issue in GT Edge AI Platform Versions before v2.0.10-dev allows attackers to execute arbitrary code via injecting a crafted JSON payload into the Prompt window...

9.8CVSS7.3AI score0.00503EPSS
SaveExploits0References3
NVD
NVD
•added 2025/12/19 5:15 p.m.•15 views

CVE-2025-63665

An issue in GT Edge AI Community Edition Versions before v2.0.12 allows attackers to execute arbitrary code via injecting a crafted JSON payload into the Prompt window...

9.8CVSS0.00503EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/12/19 12:00 a.m.•6 views

CVE-2025-63665

An issue in GT Edge AI Community Edition Versions before v2.0.12 allows attackers to execute arbitrary code via injecting a crafted JSON payload into the Prompt window...

7.4AI score0.00503EPSS
SaveExploits0References2
Rows per page
Query Builder