Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2024-42760

SQL Injection vulnerability in Ellevo v.6.2.0.38160 allows a remote attacker to obtain sensitive information via the /api/mob/instrucao/conta/destinatarios component.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Ellevo
Products
Ellevo
CVE-2024-42759

An issue in Ellevo v.6.2.0.38160 allows a remote attacker to escalate privileges via the /api/usuario/cadastrodesuplente endpoint.

CVSS 3.1 · 6.3 Medium EPSS < 1% KEV · Not listed
Vendors
Ellevo
Products
Ellevo
CVE-2024-46655

A reflected cross-site scripting (XSS) vulnerability in Ellevo 6.2.0.38160 allows attackers to execute arbitrary code in the context of a user's browser via a crafted payload or URL.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Ellevo
Products
Ellevo