Lucene search
+L

46 matches found

CNNVD
CNNVD
added 2023/10/03 12:0 a.m.25 views

IDM Sistemas QSige SQL Injection Vulnerability

IDM Sistemas QSige is a communication management system from IDM Sistemas. A security vulnerability exists in IDM Sistemas QSige that stems from a web application that does not properly filter input parameters, resulting in SQL injection, DoS, or information disclosure...

8.8CVSS7.2AI score0.00493EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/10/03 12:0 a.m.8 views

IDM Sistemas QSige Cross-Site Scripting Vulnerability

IDM Sistemas QSige is a communication management system from IDM Sistemas. IDM Sistemas QSige suffers from a cross-site scripting vulnerability that stems from allowing an attacker to perform XSS attacks against certain resources, resulting in a DoS condition as well as other operations...

8.2CVSS5.8AI score0.00331EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/10/03 12:0 a.m.11 views

PT-2023-27741 · Qsige · Qsige

Name of the Vulnerable Software and Affected Versions: QSige affected versions not specified Description: The QSige login SSO lacks an access control mechanism to verify if a user has sufficient permissions to request a resource. To exploit this, a user must first log into the application...

8.8CVSS6.3AI score0.00398EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2023/10/03 12:0 a.m.9 views

IDM Sistemas QSige Security Vulnerability

IDM Sistemas QSige is a communication management system from IDM Sistemas. A security vulnerability exists in QSige login SSO that stems from the absence of an access control mechanism to verify that the user requesting the resource has sufficient privileges to perform this operation...

8.8CVSS6.8AI score0.00398EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/10/03 12:0 a.m.7 views

PT-2023-27735 · Unknown · Qsige Monitor

Name of the Vulnerable Software and Affected Versions: QSige Monitor affected versions not specified Description: The QSige Monitor application lacks an access control mechanism to verify if a user has sufficient permissions to access a resource. A user must be logged into the application to...

7.6CVSS6.3AI score0.00322EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2023/10/03 12:0 a.m.8 views

PT-2023-27746 · Qsige · Qsige

Name of the Vulnerable Software and Affected Versions: QSige affected versions not specified Description: The QSige login SSO lacks an access control mechanism to verify if a user has sufficient permissions to request a resource. To exploit this, a user must first log into the application...

8.8CVSS8.5AI score0.00584EPSS
SaveExploits0References4
Rows per page
Query Builder