Cemi Tomasz Pawełek Cemipark
3 CVEs affecting Cemi Tomasz Pawełek Cemipark. Latest disclosed: 2024-05-14. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-4423 | High | 7.2 | 2024-05-14 | The access control in CemiPark software does not properly validate user-entered data, which allows the authentication bypass. An attacker who has network acces… |
CVE-2024-4424 | Medium | 6.1 | 2024-05-14 | The access control in CemiPark software does not properly validate user-entered data, which allows the stored cross-site scripting (XSS) attack. The parameters… |
CVE-2024-4425 | Medium | 5.4 | 2024-05-14 | The access control in CemiPark software stores integration (e.g. FTP or SIP) credentials in plain-text. An attacker who gained unauthorized access to the devic… |