Lucene search
K

4 matches found

BDU FSTEC
BDU FSTEC
added 2025/04/23 12:0 a.m.1 views

The vulnerability of the OData protocol implementation in SAP S4CORE Entity software allows unauthorized access to protected information.

The vulnerability of the OData protocol implementation in SAP S4CORE Entity software is related to deficiencies in displaying hidden user fields. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

4.3CVSS5.5AI score0.00166EPSS
Exploits0References1Affected Software1
OSV
OSV
added 2024/11/11 1:15 p.m.2 views

CVE-2024-43429

A flaw was found in moodle. Some hidden user profile fields are visible in gradebook reports, which could result in users without the "view hidden user fields" capability having access to the information...

5.3CVSS6.4AI score
Exploits0References2
Positive Technologies
Positive Technologies
added 2024/08/19 12:0 a.m.6 views

PT-2024-8619 · Moodle +2 · Moodle +2

Name of the Vulnerable Software and Affected Versions: Moodle affected versions not specified Description: A flaw in Moodle allows hidden user profile fields to be visible in gradebook reports. This could result in users without the view hidden user fields capability having access to confidential...

8.8CVSS5.6AI score0.88917EPSS
Exploits8References78
BDU FSTEC
BDU FSTEC
added 2022/05/30 12:0 a.m.1 views

The vulnerability of the core_user class implementation in the virtual learning environment Moodle allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the coreuser class implementation in the virtual learning environment Moodle is related to deficiencies in displaying hidden user fields. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

5.3CVSS6.8AI score0.00471EPSS
Exploits0References11Affected Software3
Rows per page
Query Builder