Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 5

Export CSV
CVE-2024-47088

User Enumeration vulnerability

This vulnerability exists in Apex Softcell LD Geo due to missing restrictions for excessive failed authentication attempts on its API based login. A remote attacker could exploit this vulnerability by conducting a brute force attack on login OTP, which could lead to gain unauthorized access to other user accounts.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed
Vendors
Apexsoftcell
Products
Ld Dp Back Office Ld Geo
CVE-2024-47089

Unauthorized Transaction Manipulation Vulnerability

This vulnerability exists in the Apex Softcell LD Geo due to improper validation of the transaction token ID in the API endpoint. An authenticated remote attacker could exploit this vulnerability by manipulating the transaction token ID in the API request leading to unauthorized access and modification of transactions belonging to other users.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Apexsoftcell
Products
Ld Dp Back Office Ld Geo
CVE-2024-47085

Parameter Manipulation Vulnerability

This vulnerability exists in Apex Softcell LD DP Back Office due to improper validation of certain parameters (cCdslClicentcode and cLdClientCode) in the API endpoint. An authenticated remote attacker could exploit this vulnerability by manipulating parameters in the API request body leading to exposure of sensitive information belonging to other users.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Apexsoftcell
Products
Ld Dp Back Office Ld Geo
CVE-2024-47086

OTP Bypass Vulnerability

This vulnerability exists in Apex Softcell LD DP Back Office due to improper implementation of OTP validation mechanism in certain API endpoints. An authenticated remote attacker could exploit this vulnerability by providing arbitrary OTP value for authentication and subsequently changing its API response. Successful exploitation of this vulnerability could allow the attacker to bypass OTP verification for other user accounts.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Apexsoftcell
Products
Ld Dp Back Office Ld Geo
CVE-2024-47087

Information Disclosure Vulnerability

This vulnerability exists in Apex Softcell LD Geo due to improper validation of the certain parameters (Client ID, DPID or BOID) in the API endpoint. An authenticated remote attacker could exploit this vulnerability by manipulating parameters in the API request body leading to exposure of sensitive information belonging to other users.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Apexsoftcell
Products
Ld Dp Back Office Ld Geo