primakon kayıtları
primakon üreticisine ait 7 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-285 Improper Authorization3
- CWE-284 Improper Access Control2
- CWE-497 Exposure of Sensitive System Information to an Unauthorized Control Sphere1
- CWE-639 Authorization Bypass Through User-Controlled Key1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
7 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2025-64063İstismar yok | Primakon Pi Portal 1.0.18 API endpoints fail to enforce sufficient authorization checks when processing requests.primakon · project contract management · CWE-285 | Kritik9,8 | — | %0,3 | 25 Kas 2025 |
35İzleyin | CVE-2025-64062İstismar yok | The Primakon Pi Portal 1.0.18 /api/V2/pp_users?email endpoint is used for user data filtering but lacks proper server-side validation againsprimakon · project contract management · CWE-285 | Yüksek8,8 | — | %0,2 | 25 Kas 2025 |
35İzleyin | CVE-2025-64064İstismar yok | Primakon Pi Portal 1.0.18 /api/v2/pp_users endpoint fails to adequately check user permissions before processing a PATCH request to modify tprimakon · project contract management · CWE-284 | Yüksek8,8 | — | %0,2 | 25 Kas 2025 |
35İzleyin | CVE-2025-64065İstismar yok | The Primakon Pi Portal 1.0.18 API /api/V2/pp_udfv_admin endpoint, fails to perform necessary server-side validation.primakon · project contract management · CWE-285 | Yüksek8,8 | — | %0,2 | 25 Kas 2025 |
34İzleyin | CVE-2025-64066İstismar yok | Primakon Pi Portal 1.0.18 REST /api/v2/user/register endpoint suffers from a Broken Access Control vulnerability.primakon · project contract management · CWE-284 | Yüksek8,6 | — | %0,2 | 25 Kas 2025 |
21İzleyin | CVE-2025-64067İstismar yok | Primakon Pi Portal 1.0.18 API endpoints responsible for retrieving object-specific or filtered data (e.g., user profiles, project records) fprimakon · project contract management · CWE-639 | Orta5,3 | — | %0,2 | 25 Kas 2025 |
17İzleyin | CVE-2025-64061İstismar yok | Primakon Pi Portal 1.0.18 /api/v2/users endpoint is vulnerable to unauthorized data exposure due to deficient access control mechanisms.primakon · project contract management · CWE-497 | Orta4,3 | — | %0,2 | 25 Kas 2025 |
- CVE-2025-6406339İzleyin
Primakon Pi Portal 1.0.18 API endpoints fail to enforce sufficient authorization checks when processing requests.
KritikCVSS 9,8İstismar yokEPSS %0primakon · project contract management25 Kas 2025
- CVE-2025-6406235İzleyin
The Primakon Pi Portal 1.0.18 /api/V2/pp_users?email endpoint is used for user data filtering but lacks proper server-side validation agains
YüksekCVSS 8,8İstismar yokEPSS %0primakon · project contract management25 Kas 2025
- CVE-2025-6406435İzleyin
Primakon Pi Portal 1.0.18 /api/v2/pp_users endpoint fails to adequately check user permissions before processing a PATCH request to modify t
YüksekCVSS 8,8İstismar yokEPSS %0primakon · project contract management25 Kas 2025
- CVE-2025-6406535İzleyin
The Primakon Pi Portal 1.0.18 API /api/V2/pp_udfv_admin endpoint, fails to perform necessary server-side validation.
YüksekCVSS 8,8İstismar yokEPSS %0primakon · project contract management25 Kas 2025
- CVE-2025-6406634İzleyin
Primakon Pi Portal 1.0.18 REST /api/v2/user/register endpoint suffers from a Broken Access Control vulnerability.
YüksekCVSS 8,6İstismar yokEPSS %0primakon · project contract management25 Kas 2025
- CVE-2025-6406721İzleyin
Primakon Pi Portal 1.0.18 API endpoints responsible for retrieving object-specific or filtered data (e.g., user profiles, project records) f
OrtaCVSS 5,3İstismar yokEPSS %0primakon · project contract management25 Kas 2025
- CVE-2025-6406117İzleyin
Primakon Pi Portal 1.0.18 /api/v2/users endpoint is vulnerable to unauthorized data exposure due to deficient access control mechanisms.
OrtaCVSS 4,3İstismar yokEPSS %0primakon · project contract management25 Kas 2025