Lucene search
K

6 matches found

RedhatCVE
RedhatCVE
added 2026/06/05 7:34 p.m.8 views

CVE-2026-10863

A security issue was fixed in the correlations over-correlation endpoint where the order query parameter was accepted from user-controlled named request parameters. This allowed an authenticated user to override the server-defined ordering of over-correlating values. Depending on how the value wa...

8.1CVSS5.5AI score0.00225EPSS
Exploits0References1
NVD
NVD
added 2026/06/04 3:16 p.m.8 views

CVE-2026-10863

A security issue was fixed in the correlations over-correlation endpoint where the order query parameter was accepted from user-controlled named request parameters. This allowed an authenticated user to override the server-defined ordering of over-correlating values. Depending on how the value wa...

8.1CVSS0.00225EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/06/04 1:44 p.m.4 views

CVE-2026-10863

A security issue was fixed in the correlations over-correlation endpoint where the order query parameter was accepted from user-controlled named request parameters. This allowed an authenticated user to override the server-defined ordering of over-correlating values. Depending on how the value wa...

6.4CVSS5.8AI score0.00225EPSS
Exploits0References2
CVE
CVE
added 2026/06/04 1:44 p.m.12 views

CVE-2026-10863

CVE-2026-10863 affects the correlations over-correlation endpoint in the application, specifically the overCorrelations() function in app/Controller/CorrelationsController.php. The vulnerability arises from accepting an order parameter from user-controlled named request parameters, which could al...

8.1CVSS5.8AI score0.00225EPSS
Exploits0References1Affected Software1
EUVD
EUVD
added 2026/06/04 1:44 p.m.7 views

EUVD-2026-34265

A security issue was fixed in the correlations over-correlation endpoint where the order query parameter was accepted from user-controlled named request parameters. This allowed an authenticated user to override the server-defined ordering of over-correlating values. Depending on how the value wa...

6.4CVSS5.8AI score0.00225EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/06/04 12:0 a.m.11 views

PT-2026-46237

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description An issue exists in the 'over-correlation' endpoint where the order query parameter is accepted from user-controlled named request parameters. This allows an...

8.1CVSS5.4AI score0.00225EPSS
Exploits0References4
Rows per page
Query Builder