Lucene search
+L

23 matches found

RedhatCVE
RedhatCVE
•added 2025/12/23 12:25 a.m.•34 views

CVE-2025-63663

Incorrect access control in the /api/v1/conversations//files API of GT Edge AI Platform before v2.0.10 allows unauthorized attackers to access other users' uploaded files...

7.5CVSS6.8AI score0.00287EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/12/23 12:25 a.m.•22 views

CVE-2025-63662

Insecure permissions in the /api/v1/agents API of GT Edge AI Platform before v2.0.10-dev allows unauthorized attackers to access sensitive information...

7.5CVSS6.7AI score0.00302EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/12/22 9:30 p.m.•19 views

EUVD-2025-204736

Incorrect access control in the /api/v1/conversations//messages API of GT Edge AI Platform before v2.0.10-dev allows unauthorized attackers to access other users' message history with AI agents...

7.5CVSS6.3AI score0.00287EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/12/22 9:30 p.m.•17 views

EUVD-2025-204740

Insecure permissions in the /api/v1/agents API of GT Edge AI Platform before v2.0.10-dev allows unauthorized attackers to access sensitive information...

6.2AI score0.00302EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/12/22 9:30 p.m.•12 views

EUVD-2025-204739

Incorrect access control in the /api/v1/conversations//files API of GT Edge AI Platform before v2.0.10 allows unauthorized attackers to access other users' uploaded files...

7.5CVSS6.3AI score0.00287EPSS
SaveExploits0References3
OSV
OSV
•added 2025/12/22 7:15 p.m.•16 views

CVE-2025-63664

Incorrect access control in the /api/v1/conversations//messages API of GT Edge AI Platform before v2.0.10-dev allows unauthorized attackers to access other users' message history with AI agents...

7.5CVSS5.8AI score0.00287EPSS
SaveExploits0References2
NVD
NVD
•added 2025/12/22 7:15 p.m.•11 views

CVE-2025-63662

Insecure permissions in the /api/v1/agents API of GT Edge AI Platform before v2.0.10-dev allows unauthorized attackers to access sensitive information...

7.5CVSS0.00302EPSS
SaveExploits0References2
NVD
NVD
•added 2025/12/22 7:15 p.m.•17 views

CVE-2025-63663

Incorrect access control in the /api/v1/conversations//files API of GT Edge AI Platform before v2.0.10 allows unauthorized attackers to access other users' uploaded files...

7.5CVSS0.00287EPSS
SaveExploits0References2
OSV
OSV
•added 2025/12/22 7:15 p.m.•16 views

CVE-2025-63663

Incorrect access control in the /api/v1/conversations//files API of GT Edge AI Platform before v2.0.10 allows unauthorized attackers to access other users' uploaded files...

7.5CVSS5.8AI score0.00287EPSS
SaveExploits0References2
CVE
CVE
•added 2025/12/22 12:00 a.m.•48 views

CVE-2025-63663

The GT Edge AI Platform is vulnerable to an incorrect access control flaw in the /api/v1/conversations/*/files API, affecting versions prior to v2.0.10 . An unauthorized attacker can exploit this by targeting the file identifier parameter within the API endpoint to access files uploaded by other ...

6.4AI score0.00287EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/22 12:00 a.m.•1 views

CVE-2025-63664: Improper Access Control

Incorrect access control in the /api/v1/conversations//messages API of GT Edge AI Platform before v2.0.10-dev allows unauthorized attackers to access other users' message history with AI agents...

7.5CVSS5.8AI score0.00287EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/22 12:00 a.m.•0 views

CVE-2025-63663: Improper Access Control

Incorrect access control in the /api/v1/conversations//files API of GT Edge AI Platform before v2.0.10 allows unauthorized attackers to access other users' uploaded files...

7.5CVSS5.8AI score0.00287EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/12/22 12:00 a.m.•38 views

CVE-2025-63662

Insecure permissions in the /api/v1/agents API of GT Edge AI Platform before v2.0.10-dev allows unauthorized attackers to access sensitive information...

0.00302EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/12/22 12:00 a.m.•14 views

PT-2025-52671

Name of the Vulnerable Software and Affected Versions GT Edge AI Platform versions prior to 2.0.10-dev Description The /api/v1/agents API in GT Edge AI Platform has insecure permissions, potentially allowing unauthorized access to sensitive information. The API endpoint ''/api/v1/agents'' is...

7.5CVSS6.6AI score0.00302EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/22 12:00 a.m.•1 views

CVE-2025-63662: Exposure of Sensitive Information to an Unauthorized Actor

Insecure permissions in the /api/v1/agents API of GT Edge AI Platform before v2.0.10-dev allows unauthorized attackers to access sensitive information...

7.5CVSS5.8AI score0.00302EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/12/22 12:00 a.m.•35 views

CVE-2025-63663

Incorrect access control in the /api/v1/conversations//files API of GT Edge AI Platform before v2.0.10 allows unauthorized attackers to access other users' uploaded files...

0.00287EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/12/20 12:12 a.m.•23 views

CVE-2025-63665

An issue in GT Edge AI Community Edition Versions before v2.0.12 allows attackers to execute arbitrary code via injecting a crafted JSON payload into the Prompt window...

9.8CVSS7.8AI score0.00503EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/12/19 6:31 p.m.•16 views

EUVD-2025-204583

An issue in GT Edge AI Platform Versions before v2.0.10-dev allows attackers to execute arbitrary code via injecting a crafted JSON payload into the Prompt window...

9.8CVSS7.3AI score0.00503EPSS
SaveExploits0References3
NVD
NVD
•added 2025/12/19 5:15 p.m.•14 views

CVE-2025-63665

An issue in GT Edge AI Community Edition Versions before v2.0.12 allows attackers to execute arbitrary code via injecting a crafted JSON payload into the Prompt window...

9.8CVSS0.00503EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/12/19 12:00 a.m.•6 views

CVE-2025-63665

An issue in GT Edge AI Community Edition Versions before v2.0.12 allows attackers to execute arbitrary code via injecting a crafted JSON payload into the Prompt window...

7.4AI score0.00503EPSS
SaveExploits0References2
Rows per page
Query Builder