Lucene search
K

73 matches found

RedhatCVE
RedhatCVE
added 2026/05/26 8:14 p.m.9 views

CVE-2026-40127

OutSystems Lifetime is vulnerable to Authorization Bypass Through User-Controlled Key vulnerability in ApplicationID parameter. Any authenticated user, can read the Change Log containing actions performed by other users as well as application name of any application. This issue was fixed in...

5.3CVSS5.8AI score0.00043EPSS
Exploits0References1
NVD
NVD
added 2026/05/25 11:16 a.m.11 views

CVE-2026-40127

OutSystems Lifetime is vulnerable to Authorization Bypass Through User-Controlled Key vulnerability in ApplicationID parameter. Any authenticated user, can read the Change Log containing actions performed by other users as well as application name of any application. This issue was fixed in...

5.3CVSS0.00043EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2026/05/25 10:18 a.m.6 views

CVE-2026-40127

OutSystems Lifetime is vulnerable to Authorization Bypass Through User-Controlled Key vulnerability in ApplicationID parameter. Any authenticated user, can read the Change Log containing actions performed by other users as well as application name of any application. This issue was fixed in...

5.3CVSS5.8AI score0.00043EPSS
Exploits0References3
Cvelist
Cvelist
added 2026/05/25 10:18 a.m.31 views

CVE-2026-40127 Authorization Bypass Through User-Controlled Key in OutSystems Lifetime

OutSystems Lifetime is vulnerable to Authorization Bypass Through User-Controlled Key vulnerability in ApplicationID parameter. Any authenticated user, can read the Change Log containing actions performed by other users as well as application name of any application. This issue was fixed in...

5.3CVSS0.00043EPSS
Exploits0References2
EUVD
EUVD
added 2026/05/25 10:18 a.m.8 views

EUVD-2026-31662

OutSystems Lifetime is vulnerable to Authorization Bypass Through User-Controlled Key vulnerability in ApplicationID parameter. Any authenticated user, can read the Change Log containing actions performed by other users as well as application name of any application. This issue was fixed in...

5.3CVSS5.8AI score0.00043EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2026/05/25 10:18 a.m.10 views

CVE-2026-40127 Authorization Bypass Through User-Controlled Key in OutSystems Lifetime

OutSystems Lifetime is vulnerable to Authorization Bypass Through User-Controlled Key vulnerability in ApplicationID parameter. Any authenticated user, can read the Change Log containing actions performed by other users as well as application name of any application. This issue was fixed in...

5.3CVSS5.8AI score0.00043EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2026/05/25 12:0 a.m.9 views

PT-2026-43032

OutSystems Lifetime is vulnerable to Authorization Bypass Through User-Controlled Key vulnerability in ApplicationID parameter. Any authenticated user, can read the Change Log containing actions performed by other users as well as application name of any application. This issue was fixed in...

5.3CVSS5.8AI score0.00043EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/05/25 12:0 a.m.5 views

OutSystems Lifetime 安全漏洞

OutSystems Lifetime is a low-code platform management control center from OutSystems USA. A security vulnerability exists in OutSystems Lifetime versions prior to 11.28.2.3955, which stems from the presence of the ApplicationID parameter to bypass authorization via a user control key, which could...

5.3CVSS5.8AI score0.00043EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2025/12/11 5:3 a.m.3 views

CVE-2025-61258

Outsystems Platform Server 11.18.1.37828 allows attackers to cause a denial of service via a crafted content-length value mismatching the body length. NOTE: the Supplier indicates that they are unable to reproduce this...

7.5CVSS6.6AI score0.00131EPSS
Exploits1References1
EUVD
EUVD
added 2025/12/09 6:30 p.m.2 views

EUVD-2025-202263

An issue was discovered in Outsystems Platform Server 11.18.1.37828 allows attackers to cause a denial of service via crafted content-length value mismatching the body length...

6.2AI score0.00131EPSS
Exploits1References4
NVD
NVD
added 2025/12/09 6:15 p.m.1 views

CVE-2025-61258

Outsystems Platform Server 11.18.1.37828 allows attackers to cause a denial of service via a crafted content-length value mismatching the body length. NOTE: the Supplier indicates that they are unable to reproduce this...

7.5CVSS0.00131EPSS
Exploits1References3
OSV
OSV
added 2025/12/09 6:15 p.m.1 views

CVE-2025-61258

Outsystems Platform Server 11.18.1.37828 allows attackers to cause a denial of service via a crafted content-length value mismatching the body length. NOTE: the Supplier indicates that they are unable to reproduce this...

7.5CVSS5.8AI score0.00131EPSS
Exploits1References3
Cvelist
Cvelist
added 2025/12/09 12:0 a.m.18 views

CVE-2025-61258

Outsystems Platform Server 11.18.1.37828 allows attackers to cause a denial of service via a crafted content-length value mismatching the body length. NOTE: the Supplier indicates that they are unable to reproduce this...

0.00131EPSS
Exploits1References3
CNNVD
CNNVD
added 2025/12/09 12:0 a.m.2 views

Outsystems Platform Server 安全漏洞

Outsystems Platform Server is a core component of a low-code development platform from Outsystems, USA. A security vulnerability exists in Outsystems Platform Server version 11.18.1.37828, which stems from a mismatch between the value of the specially crafted content-length and the length of the...

7.5CVSS6.5AI score0.00131EPSS
Exploits1References4
CVE
CVE
added 2025/12/09 12:0 a.m.9 views

CVE-2025-61258

CVE-2025-61258 affects Outsystems Platform Server 11.18.1.37828. Multiple sources confirm a denial-of-service vulnerability caused by a mismatch between a crafted Content-Length value and the actual body length. The Red Hat and NVD entries, along with EUVD/CNNVD/CVE records, consistently describe...

7.5CVSS6.2AI score0.00131EPSS
Exploits1References3Affected Software1
Vulnrichment
Vulnrichment
added 2025/12/09 12:0 a.m.1 views

CVE-2025-61258

Outsystems Platform Server 11.18.1.37828 allows attackers to cause a denial of service via a crafted content-length value mismatching the body length. NOTE: the Supplier indicates that they are unable to reproduce this...

6.2AI score0.00131EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2025/12/09 12:0 a.m.2 views

PT-2025-50124

Name of the Vulnerable Software and Affected Versions Outsystems Platform Server version 11.18.1.37828 Description A flaw exists in Outsystems Platform Server that enables attackers to trigger a denial of service. This is achieved by submitting requests with a crafted Content-Length value that do...

7.5CVSS6.4AI score0.00131EPSS
Exploits1References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2021-15993

Malware in sbrugna...

8.6CVSS8.7AI score0.00249EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2020-21814

Malware in sbrugna...

7.2CVSS6.6AI score0.01294EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2020-5881

Malware in sbrugna...

6.1CVSS6.3AI score0.00419EPSS
Exploits0References3
Rows per page
Query Builder