huntflow kayıtları
huntflow üreticisine ait 3 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
- CWE-307 Improper Restriction of Excessive Authentication Attempts1
- CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
3 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2021-37934İstismar yok | Due to insufficient server-side login-attempt limit enforcement, a vulnerability in /account/login in Huntflow Enterprise before 3.10.14 couhuntflow · huntflow enterprise · CWE-307 | Kritik9,8 | — | %1,6 | 10 Ara 2021 |
30İzleyin | CVE-2021-37933İstismar yok | An LDAP injection vulnerability in /account/login in Huntflow Enterprise before 3.10.6 could allow an unauthenticated, remote user to modifyhuntflow · huntflow enterprise · CWE-74 | Yüksek7,5 | — | %1,5 | 14 Eki 2021 |
30İzleyin | CVE-2021-37935İstismar yok | An information disclosure vulnerability in the login page of Huntflow Enterprise before 3.10.4 could allow an unauthenticated, remote user thuntflow · huntflow enterprise · CWE-200 | Yüksek7,5 | — | %1,4 | 10 Ara 2021 |
- CVE-2021-3793439İzleyin
Due to insufficient server-side login-attempt limit enforcement, a vulnerability in /account/login in Huntflow Enterprise before 3.10.14 cou
KritikCVSS 9,8İstismar yokEPSS %2huntflow · huntflow enterprise10 Ara 2021
- CVE-2021-3793330İzleyin
An LDAP injection vulnerability in /account/login in Huntflow Enterprise before 3.10.6 could allow an unauthenticated, remote user to modify
YüksekCVSS 7,5İstismar yokEPSS %2huntflow · huntflow enterprise14 Eki 2021
- CVE-2021-3793530İzleyin
An information disclosure vulnerability in the login page of Huntflow Enterprise before 3.10.4 could allow an unauthenticated, remote user t
YüksekCVSS 7,5İstismar yokEPSS %1huntflow · huntflow enterprise10 Ara 2021