CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

3 matches found

NVD•added 2023/11/24 2:15 a.m.•38 views

CVE-2023-33706

SysAid before 23.2.15 allows Indirect Object Reference IDOR attacks to read ticket data via a modified sid parameter to EmailHtmlSourceIframe.jsp or a modified srID parameter to ShowMessage.jsp...

6.5CVSS0.00582EPSS

SaveExploits1References1

Prion•added 2023/11/24 2:15 a.m.•31 views

Code injection

SysAid before 23.2.15 allows Indirect Object Reference IDOR attacks to read ticket data via a modified sid parameter to EmailHtmlSourceIframe.jsp or a modified srID parameter to ShowMessage.jsp...

4CVSS7AI score0.00582EPSS

SaveExploits1References1Affected Software1

Rapid7 Vulnerability Database (full)•added 2023/11/24 12:00 a.m.•5 views

CVE-2023-33706: Authorization Bypass Through User-Controlled Key

SysAid before 23.2.15 allows Indirect Object Reference IDOR attacks to read ticket data via a modified sid parameter to EmailHtmlSourceIframe.jsp or a modified srID parameter to ShowMessage.jsp...

6.5CVSS6AI score0.00582EPSS

SaveExploits1References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by