2 matches found
CVE-2025-63562: Improper Access Control
Summer Pearl Group Vacation Rental Management Platform prior to v1.0.2 suffers from insufficient server-side authorization. Authenticated attackers can call several endpoints and perform create/update/delete actions on resources owned by arbitrary users by manipulating request parameters e.g.,...
6.3CVSS6AI score0.00196EPSS
SaveExploits0References1
PT-2018-8842
Name of the Vulnerable Software and Affected Versions Cisco Enterprise NFV Infrastructure Software NFVIS affected versions not specified Description The issue is related to insufficient server-side authorization checks in the web-based management interface. An authenticated, remote attacker with...
6.8CVSS0.01789EPSS
SaveExploits0References3
20