3 matches found
[PUNCIA] [CWE-319] Cleartext Transmission of Sensitive Information via HTTP urls in `API_URLS`
ImpactAPIURLS is utilizing HTTP instead of HTTPS for communication that can lead to issues like Eavesdropping, Data Tampering, Unauthorized Data Access & MITM Attacks. ReferencesISSUEPATCH...
6.3CVSS5.9AI score0.0027EPSS
SaveExploits0References8Affected Software1
CVE-2026-10763: Undefined Security Weakness
PROMOD V is using insecure HTTP communication instead of HTTPS. The vulnerability is due to the lack of HTTPS support from 3rd party Digipede server...
7CVSS5.9AI score0.00428EPSS
SaveExploits0References1
20