Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 7

Export CSV
CVE-2023-4103

Multiple vulnerabilities in IDM Sistemas QSige

QSige statistics are affected by a remote SQLi vulnerability. It has been identified that the web application does not correctly filter input parameters, allowing SQL injections, DoS or information disclosure. As a prerequisite, it is necessary to log into the application.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Qsige
Products
Qsige
CVE-2023-4102

Multiple vulnerabilities in IDM Sistemas QSige

QSige login SSO does not have an access control mechanism to verify whether the user requesting a resource has sufficient permissions to do so. As a prerequisite, it is necessary to log into the application.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Qsige
Products
Qsige
CVE-2023-4101

Multiple vulnerabilities in IDM Sistemas QSige

The QSige login SSO does not have an access control mechanism to verify whether the user requesting a resource has sufficient permissions to do so. As a prerequisite, it is necessary to log into the application.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Qsige
Products
Qsige
CVE-2023-4100

Multiple vulnerabilities in IDM Sistemas QSige

Allows an attacker to perform XSS attacks stored on certain resources. Exploiting this vulnerability can lead to a DoS condition, among other actions.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Qsige
Products
Qsige
CVE-2023-4099

Multiple vulnerabilities in IDM Sistemas QSige

The QSige Monitor application does not have an access control mechanism to verify whether the user requesting a resource has sufficient permissions to do so. As a prerequisite, it is necessary to log into the application.

CVSS 3.1 · 7.6 High EPSS < 1% KEV · Not listed
Vendors
Qsige
Products
Qsige
CVE-2023-4098

Multiple vulnerabilities in IDM Sistemas QSige

It has been identified that the web application does not correctly filter input parameters, allowing SQL injections, DoS or information disclosure. As a prerequisite, it is necessary to log into the application.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Qsige
Products
Qsige
CVE-2023-4097

Multiple vulnerabilities in IDM Sistemas QSige

The file upload functionality is not implemented correctly and allows uploading of any type of file. As a prerequisite, it is necessary for the attacker to log into the application with a valid username.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Qsige
Products
Qsige