Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

Filtered by vendor Servisnet Subscribe
Total 3 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-22832 1 Servisnet 1 Tessa 2022-02-10 10.0 HIGH 9.8 CRITICAL
An issue was discovered in Servisnet Tessa 0.0.2. Authorization data is available via an unauthenticated /data-service/users/ request.
CVE-2022-22831 1 Servisnet 1 Tessa 2022-02-10 7.5 HIGH 9.8 CRITICAL
An issue was discovered in Servisnet Tessa 0.0.2. An attacker can add a new sysadmin user via a manipulation of the Authorization HTTP header.
CVE-2022-22833 1 Servisnet 1 Tessa 2022-02-10 5.0 MEDIUM 7.5 HIGH
An issue was discovered in Servisnet Tessa 0.0.2. An attacker can obtain sensitive information via a /js/app.js request.