Vulnerabilities (CVE)

Filtered by CWE-592
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2024-38884 1 Horizoncloud 1 Caterease 2025-05-13 N/A 7.8 HIGH
An issue in Horizon Business Services Inc. Caterease 16.0.1.1663 through 24.0.1.2405 and possibly later versions, allows a local attacker to perform an Authentication Bypass attack due to improperly implemented security checks for standard authentication mechanisms
CVE-2024-42759 2024-09-10 N/A 6.3 MEDIUM
An issue in Ellevo v.6.2.0.38160 allows a remote attacker to escalate privileges via the /api/usuario/cadastrodesuplente endpoint.