Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 5

Export CSV
CVE-2024-40410

Cybele Software Thinfinity Workspace before v7.0.2.113 was discovered to contain a hardcoded cryptographic key used for encryption.

CVSS 3.1 · 4.8 Medium EPSS < 1% KEV · Not listed
Vendors
Cybelesoft
Products
Thinfinity Workspace
CVE-2024-40408

Cybele Software Thinfinity Workspace before v7.0.2.113 was discovered to contain an access control issue in the Create Profile section. This vulnerability allows attackers to create arbitrary user profiles with elevated privileges.

CVSS 3.1 · 7.3 High EPSS < 1% KEV · Not listed
Vendors
Cybelesoft
Products
Thinfinity Workspace
CVE-2024-40407

A full path disclosure in Cybele Software Thinfinity Workspace before v7.0.2.113 allows attackers to obtain the root path of the application via unspecified vectors.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Cybelesoft
Products
Thinfinity Workspace
CVE-2024-40405

Incorrect access control in Cybele Software Thinfinity Workspace before v7.0.3.109 allows attackers to gain access to a secondary broker via a crafted request.

CVSS 3.1 · 8.1 High EPSS < 1% KEV · Not listed
Vendors
Cybelesoft
Products
Thinfinity Workspace
CVE-2024-40404

Cybele Software Thinfinity Workspace before v7.0.2.113 was discovered to contain an access control issue in the API endpoint where Web Sockets connections are established.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Cybelesoft
Products
Thinfinity Workspace