Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-xppg-xx55-6rw5

Опубликовано: 12 авг. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 7.5
CVSS3: 7.1

Описание

A vulnerability has been identified in SmartClient modules Opcenter QL Home (SC) (All versions >= V13.2 < V2506), SOA Audit (All versions >= V13.2 < V2506), SOA Cockpit (All versions >= V13.2 < V2506). The affected application does not enforce mandatory authorization on some functionality level at server side. This could allow an authenticated attacker to gain complete access of the application.

A vulnerability has been identified in SmartClient modules Opcenter QL Home (SC) (All versions >= V13.2 < V2506), SOA Audit (All versions >= V13.2 < V2506), SOA Cockpit (All versions >= V13.2 < V2506). The affected application does not enforce mandatory authorization on some functionality level at server side. This could allow an authenticated attacker to gain complete access of the application.

EPSS

Процентиль: 4%
0.00017
Низкий

7.5 High

CVSS4

7.1 High

CVSS3

Дефекты

CWE-863

Связанные уязвимости

CVSS3: 7.1
nvd
6 месяцев назад

A vulnerability has been identified in SmartClient modules Opcenter QL Home (SC) (All versions >= V13.2 < V2506), SOA Audit (All versions >= V13.2 < V2506), SOA Cockpit (All versions >= V13.2 < V2506). The affected application does not enforce mandatory authorization on some functionality level at server side. This could allow an authenticated attacker to gain complete access of the application.

EPSS

Процентиль: 4%
0.00017
Низкий

7.5 High

CVSS4

7.1 High

CVSS3

Дефекты

CWE-863