45 matches found
CVE-2018-15206
BPC SmartVista 2 has CSRF via SVFE2/pages/admpages/roles/createrole.jsf...
PT-2019-9095
Name of the Vulnerable Software and Affected Versions BPC SmartVista 2 Description The issue is related to improper access control in the SVFE module. A normal user can access the "SVFE2/pages/finadmin/currconvrate/currconvrate.jsf" functionality, which should only be accessible to an admin...
PT-2019-9094
Name of the Vulnerable Software and Affected Versions BPC SmartVista 2 Description The issue is related to a CSRF problem. It affects the /SVFE2/pages/admpages/roles/createrole.jsf API endpoint. Recommendations For BPC SmartVista 2, consider implementing proper CSRF protection mechanisms to preve...
CVE-2018-15207: Improper Privilege Management
BPC SmartVista 2 has Improper Access Control in the SVFE module, where it fails to appropriately restrict access: a normal user is able to access the SVFE2/pages/finadmin/currconvrate/currconvrate.jsf functionality that should be only accessible to an admin...