annexcloud records

3 published records for vendor annexcloud.

Researcher profile

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

3 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
35Monitor	CVE-2021-31928No exploit	Annex Cloud Loyalty Experience Platform <2021.1.0.1 allows any authenticated attacker to escalate privileges to superadministrator.annexcloud · loyalty experience platform	High8.8	—	1.2%	Jun 10, 2021
17Monitor	CVE-2021-31927No exploit	An Insecure Direct Object Reference (IDOR) vulnerability in Annex Cloud Loyalty Experience Platform <2021.1.0.1 allows any authenticated attannexcloud · loyalty experience platform · CWE-639 Broken access control (IDOR)	Medium4.3	—	0.5%	Jun 10, 2021
17Monitor	CVE-2021-31929No exploit	Annex Cloud Loyalty Experience Platform <2021.1.0.1 allows any authenticated attacker to modify loyalty campaigns and settings, such as frauannexcloud · loyalty experience platform · CWE-732	Medium4.3	—	0.5%	Jun 10, 2021

CVE-2021-31928
35Monitor
Annex Cloud Loyalty Experience Platform <2021.1.0.1 allows any authenticated attacker to escalate privileges to superadministrator.
HighCVSS 8.8No exploitEPSS 1%
annexcloud · loyalty experience platformJun 10, 2021
CVE-2021-31927
17Monitor
An Insecure Direct Object Reference (IDOR) vulnerability in Annex Cloud Loyalty Experience Platform <2021.1.0.1 allows any authenticated att
MediumCVSS 4.3No exploitEPSS 1%
- Broken access control (IDOR)
annexcloud · loyalty experience platformJun 10, 2021
CVE-2021-31929
17Monitor
Annex Cloud Loyalty Experience Platform <2021.1.0.1 allows any authenticated attacker to modify loyalty campaigns and settings, such as frau
MediumCVSS 4.3No exploitEPSS 1%
annexcloud · loyalty experience platformJun 10, 2021