Skip to content
Noroxi

ethyca records

20 published records for vendor ethyca.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
100%
Median publish → KEV
No record has entered KEV

Records by year

  1. 23
  2. 24
  3. 25

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

20 records
  • CVE-2024-38537
    39Monitor

    Inclusion of Untrusted polyfill.io Code Vulnerability in fides.js

    CriticalCVSS 9.8Proof of conceptEPSS 1%

    ethyca · fidesJul 2, 2024

  • CVE-2023-48224
    36Monitor

    Cryptographically Weak Generation of One-Time Codes for Identity Verification in ethyca-fides

    CriticalCVSS 9.1No exploitEPSS 1%

    ethyca · fidesNov 15, 2023

  • CVE-2025-57817
    34Monitor

    Fides Webserver API is Vulnerable to OAuth Client Privilege Escalation

    HighCVSS 8.6No exploitEPSS 0%

    ethyca · fidesSep 8, 2025

  • CVE-2023-36827
    30Monitor

    Fides vulnerable to Path Traversal in Webserver API

    HighCVSS 7.5No exploitEPSS 1%

    ethyca · fidesJul 5, 2023

  • CVE-2024-45053
    28Monitor

    Remote Code Execution Vulnerability via SSTI in Fides Webserver Jinja Email Templating Engine

    HighCVSS 7.2No exploitEPSS 1%

    ethyca · fidesSep 4, 2024

  • CVE-2023-41319
    28Monitor

    Remote Code Execution in Custom Integration Upload in Fides

    HighCVSS 7.2No exploitEPSS 1%

    ethyca · fidesSep 6, 2023

  • CVE-2023-46124
    28Monitor

    Server-Side Request Forgery Vulnerability in Custom Integration Upload

    HighCVSS 7.2No exploitEPSS 1%

    ethyca · fidesOct 25, 2023

  • CVE-2023-46125
    26Monitor

    Fides Information Disclosure Vulnerability in Config API Endpoint

    MediumCVSS 6.5No exploitEPSS 1%

    ethyca · fidesOct 25, 2023

  • CVE-2024-35189
    26Monitor

    Sensitive Data Disclosure Vulnerability in Connection Configuration Endpoints in Fides

    MediumCVSS 6.5No exploitEPSS 1%

    ethyca · fidesMay 30, 2024

  • CVE-2025-57816
    25Monitor

    Fides Webserver API Rate Limiting Vulnerability in Proxied Environments

    MediumCVSS 6.3No exploitEPSS 0%

    ethyca · fidesSep 8, 2025

  • CVE-2023-47114
    24Monitor

    Ethyca Fides HTML Injection Vulnerability in HTML-Formatted DSR Packages

    MediumCVSS 6.1No exploitEPSS 1%

    ethyca · fidesNov 8, 2023

  • CVE-2024-31223
    21Monitor

    Fides Information Disclosure Vulnerability in Privacy Center of SERVER_SIDE_FIDES_API_URL

    MediumCVSS 5.3Proof of conceptEPSS 1%

    ethyca · fidesJul 3, 2024

  • CVE-2023-46126
    21Monitor

    Fides JavaScript Injection Vulnerability in Privacy Center URL

    MediumCVSS 5.4No exploitEPSS 1%

    ethyca · fidesOct 25, 2023

  • CVE-2024-45052
    21Monitor

    Fides Webserver Authentication Timing-Based Username Enumeration Vulnerability

    MediumCVSS 5.3No exploitEPSS 1%

    ethyca · fidesSep 4, 2024

  • CVE-2023-37481
    19Monitor

    Fides Webserver Vulnerable to SVG Bomb File Uploads

    MediumCVSS 4.9No exploitEPSS 1%

    ethyca · fidesJul 18, 2023

  • CVE-2023-37480
    19Monitor

    Fides Webserver Vulnerable to Zip Bomb File Uploads

    MediumCVSS 4.9No exploitEPSS 1%

    ethyca · fidesJul 18, 2023

  • CVE-2024-34715
    13Monitor

    Partial Password Exposure Vulnerability in Fides Webserver Logs

    LowCVSS 3.3No exploitEPSS 0%

    ethyca · fidesMay 29, 2024

  • CVE-2024-52008
    8Monitor

    Password Policy Bypass Vulnerability in Fides Webserver

    LowCVSS 2.0No exploitEPSS 1%

    ethyca · fidesNov 26, 2024

  • CVE-2025-57766
    6Monitor

    Fides's Admin UI User Password Change Does Not Invalidate Current Session

    LowCVSS 1.7No exploitEPSS 0%

    ethyca · fidesSep 8, 2025

  • CVE-2025-57815
    6Monitor

    Fides Lacks Brute-Force Protections on Authentication Endpoints

    LowCVSS 1.7No exploitEPSS 0%

    ethyca · fidesSep 8, 2025