CVE-2014-0808criticalCWE-566

CVE-2014-0808: falha crítica em EC-CUBE

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar EC-CUBE+ Monitorar EC-Orange

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

28Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 9.1epss 2.2%
Authorization bypass through user-controlled key issue exists in EC-CUBE 2.11.0 through 2.12.2 and EC-Orange systems deployed before June 29th, 2015. If this vulnerability is exploited, a user of the affected shopping website may obtain other users' information by sending a crafted HTTP request.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Produtos afetados
EC-CUBE CO.,LTD. · EC-CUBES‑cubism Inc. · EC-Orange
CVEs relacionadas — EC-CUBE

No mesmo produto, das mais perigosas para as menos.

CVE-2021-20717—CVE-2021-20717EPSS 2.3%CVE-2021-20778—CVE-2021-20778EPSS 2.1%CVE-2020-5590—CVE-2020-5590EPSS 2.1%CVE-2021-20750—CVE-2021-20750EPSS 1.6%CVE-2020-5680—CVE-2020-5680EPSS 1.4%CVE-2021-20751—CVE-2021-20751EPSS 1.1%