Asiainfo International Business Support System
2 CVEs affecting Asiainfo International Business Support System. Latest disclosed: 2026-11-10. Critical: 2, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-125298 | Critical | 9.8 | 2026-11-10 | AsiaInfo Business Support System (BSS) 9.2.0 through 9.2.40 does not correctly verify cryptographic signatures for JSON Web Tokens (JWT). A remote, unauthentic… |
CVE-2026-125297 | Critical | 9.8 | 2026-11-10 | AsiaInfo Business Support System (BSS) 9.2.0 through 9.2.40 accepts unauthenticated requests via the management API '/bss/sysmgnt/api/'. A remote, unauthentica… |