Vulnerabilities in zlt2000

7 results

Vexday analysis

O fornecedor zlt2000 apresenta um perfil de risco baixo com apenas 3 CVEs registradas e nenhuma sob exploração ativa no momento. Todas as vulnerabilidades relacionam-se a controle de acesso (CWE-284), sem críticas identificadas, e nenhuma publicação recente nos últimos 90 dias, indicando um risco estabilizado.

CVE-2026-92466HIGHmicroservices-platform through 6.0.0 Missing Authorization via Disabled URL Permission CheckingEPSS 0.8%CVE-2026-92469HIGHmicroservices-platform through 6.0.0 Arbitrary File Deletion via Missing Ownership CheckEPSS 0.5%CVE-2026-92467HIGHmicroservices-platform through 6.0.0 Unverified Password Change via /users/passwordEPSS 0.4%CVE-2025-8738MEDIUMzlt2000 microservices-platform Spring Actuator Interface actuator information disclosureEPSS 0.4%CVE-2026-92468HIGHmicroservices-platform through 6.0.0 Arbitrary Elasticsearch Index Read via search-centerEPSS 0.4%CVE-2025-8841MEDIUMzlt2000 microservices-platform FileController.java upload unrestricted uploadEPSS 0.3%CVE-2025-8737MEDIUMzlt2000 microservices-platform OauthLogoutSuccessHandler.java onLogoutSuccess redirectEPSS 0.2%