CVE-2022-47559: falha de alta gravidade em Ormazabal ekorCCP
Cross-Site Request Forgery in Ormazabal products
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 8.6epss 0.2%
Lack of device control over web requests in ekorCCP and ekorRCI, allowing an attacker to create customised requests to execute malicious actions when a user is logged in, affecting availability, privacy and integrity.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
CVEs relacionadas — Ormazabal ekorCCP
No mesmo produto, das mais perigosas para as menos.
CVE-2022-47555CRITICALImproper Neutralization of Special Elements in Ormazabal productsEPSS 1.1%CVE-2022-47562HIGHAllocation of Resources Without Limits or Throttling in Ormazabal productsEPSS 0.8%CVE-2022-47553HIGHImproper Authorization in Ormazabal productsEPSS 0.8%CVE-2022-47554HIGHExposure of Sensitive Information in Ormazabal productsEPSS 0.6%CVE-2022-47558CRITICALImproper Access Control in Ormazabal productsEPSS 0.6%CVE-2022-47556MEDIUMUncontrolled Resource Consumption in Ormazabal productsEPSS 0.6%