Vulnerabilities in IDAttend Pty Ltd

30 results
Vexday analysis

IDAttend Pty Ltd apresenta 30 vulnerabilidades catalogadas, das quais 11 são críticas, porém nenhuma está sob ataque ativo conhecido. A fraqueza dominante é falha de autenticação (CWE-306), indicando deficiência estrutural no controle de acesso. Sem publicações nos últimos 90 dias, o risco é estável, mas a quantidade de falhas críticas em autenticação justifica priorização em testes de segurança e auditoria de integração com sistemas.

CVE-2023-26578HIGHArbitrary File Upload to Web Root In IDAttend’s IDWeb ApplicationEPSS 1.5%CVE-2023-26568CRITICALUnauthenticated SQL Injection In IDAttend’s IDWeb ApplicationEPSS 0.8%CVE-2023-27262CRITICALUnauthenticated SQL Injection In IDAttend’s IDWeb ApplicationEPSS 0.8%CVE-2023-27255CRITICALUnauthenticated SQL Injection In IDAttend’s IDWeb ApplicationEPSS 0.8%CVE-2023-27254CRITICALUnauthenticated SQL Injection In IDAttend’s IDWeb ApplicationEPSS 0.8%CVE-2023-26572CRITICALUnauthenticated SQL Injection In IDAttend’s IDWeb ApplicationEPSS 0.8%CVE-2023-26569CRITICALUnauthenticated SQL Injection In IDAttend’s IDWeb ApplicationEPSS 0.8%CVE-2023-26573HIGHMissing Authentication In IDAttend’s IDWeb ApplicationEPSS 0.7%CVE-2023-26575HIGHMissing Authentication In IDAttend’s IDWeb ApplicationEPSS 0.7%CVE-2023-27376HIGHMissing Authentication In IDAttend’s IDWeb ApplicationEPSS 0.7%CVE-2023-27375HIGHMissing Authentication In IDAttend’s IDWeb ApplicationEPSS 0.7%CVE-2023-26574HIGHMissing Authentication In IDAttend’s IDWeb ApplicationEPSS 0.7%CVE-2023-26570HIGHMissing Authentication In IDAttend’s IDWeb ApplicationEPSS 0.7%CVE-2023-27257HIGHMissing Authentication In IDAttend’s IDWeb ApplicationEPSS 0.7%CVE-2023-26576HIGHMissing Authentication In IDAttend’s IDWeb ApplicationEPSS 0.7%CVE-2023-27377HIGHMissing Authentication In IDAttend’s IDWeb ApplicationEPSS 0.7%CVE-2023-26580HIGHMissing Authentication In IDAttend’s IDWeb ApplicationEPSS 0.7%CVE-2023-26571HIGHMissing Authentication In IDAttend’s IDWeb ApplicationEPSS 0.6%CVE-2023-27256MEDIUMMissing Authentication In IDAttend’s IDWeb ApplicationEPSS 0.6%CVE-2023-27260CRITICALUnauthenticated SQL Injection In IDAttend’s IDWeb ApplicationEPSS 0.6%