Vulnerabilities in Changing Information Technology Inc.

4 results

Vexday analysis

A Changing Information Technology Inc. possui 4 vulnerabilidades catalogadas, com 1 crítica, mas nenhuma sob exploração ativa conhecida. A ausência de divulgações recentes e de ataques ativos sugere risco contido, embora a fraqueza dominante em path traversal (CWE-22) mereça atenção em avaliações de controle de acesso.

CVE-2022-39058HIGHChanging Information Technology Inc. RAVA certificate validation system - Path TraversalEPSS 1.9%CVE-2022-39056CRITICALChanging Information Technology Inc. RAVA certificate validation system - SQL InjectionEPSS 0.8%CVE-2022-39057HIGHChanging Information Technology Inc. RAVA certificate validation system - Command InjectionEPSS 0.8%CVE-2022-39055MEDIUMChanging Information Technology Inc. RAVA certificate validation system - Server-Side Request Forgery (SSRF)EPSS 0.5%