Lucene search
K

6 matches found

OSV
OSV
added 2024/09/03 11:15 a.m.3 views

CVE-2024-45588

This vulnerability exists in Symphony XTS Web Trading platform version 2.0.0.1P160 due to improper access controls on APIs in the Preference module of the application. An authenticated remote attacker could exploit this vulnerability by manipulating parameters through HTTP request which could lea...

8.1CVSS5.8AI score0.00363EPSS
Exploits0References1
NVD
NVD
added 2024/09/03 11:15 a.m.15 views

CVE-2024-45588

This vulnerability exists in Symphony XTS Web Trading platform version 2.0.0.1P160 due to improper access controls on APIs in the Preference module of the application. An authenticated remote attacker could exploit this vulnerability by manipulating parameters through HTTP request which could lea...

9.1CVSS0.00363EPSS
Exploits0References1
CVE
CVE
added 2024/09/03 10:13 a.m.69 views

CVE-2024-45588

The CVE-2024-45588 entry describes a vulnerability in Symphony XTS Web Trading platform, version 2.0.0.1_P160, caused by improper access controls in the APIs of the Preference module. An authenticated remote attacker can manipulate HTTP parameters to access and modify sensitive information belong...

9.1CVSS7.8AI score0.00363EPSS
Exploits0References1Affected Software2
Cvelist
Cvelist
added 2024/09/03 10:13 a.m.14 views

CVE-2024-45588 Information Disclosure Vulnerability

This vulnerability exists in Symphony XTS Web Trading platform version 2.0.0.1P160 due to improper access controls on APIs in the Preference module of the application. An authenticated remote attacker could exploit this vulnerability by manipulating parameters through HTTP request which could lea...

9.1CVSS0.00363EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/09/03 10:13 a.m.14 views

CVE-2024-45588 Information Disclosure Vulnerability

This vulnerability exists in Symphony XTS Web Trading platform version 2.0.0.1P160 due to improper access controls on APIs in the Preference module of the application. An authenticated remote attacker could exploit this vulnerability by manipulating parameters through HTTP request which could lea...

9.1CVSS6.7AI score0.00363EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/09/03 12:0 a.m.4 views

PT-2024-31691 · Unknown · Symphony Xts Web Trading

Name of the Vulnerable Software and Affected Versions: Symphony XTS Web Trading version 2.0.0.1 P160 Description: This issue exists due to improper access controls on APIs in the Preference module of the application. An authenticated remote attacker could exploit this by manipulating parameters...

9.1CVSS6.8AI score0.00363EPSS
Exploits0References7
Rows per page
Query Builder