Italtel Embrace
8 CVEs affecting Italtel Embrace. Latest disclosed: 2024-08-20. Critical: 0, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-31842 | High | 8.8 | 2024-08-20 | An issue was discovered in Italtel Embrace 1.6.4. The web application inserts the access token of an authenticated user inside GET requests. The query string f… |
CVE-2024-31846 | High | 7.5 | 2024-04-19 | An issue was discovered in Italtel Embrace 1.6.4. The web application does not restrict or incorrectly restricts access to a resource from an unauthorized acto… |
CVE-2024-31841 | High | 7.5 | 2024-04-19 | An issue was discovered in Italtel Embrace 1.6.4. The web server fails to sanitize input data, allowing remote unauthenticated attackers to read arbitrary file… |
CVE-2024-31840 | Medium | 6.5 | 2024-05-21 | An issue was discovered in Italtel Embrace 1.6.4. The web application inserts cleartext passwords in the HTML source code. An authenticated user is able to edi… |
CVE-2024-31847 | Medium | 6.1 | 2024-05-21 | An issue was discovered in Italtel Embrace 1.6.4. A stored cross-site scripting (XSS) vulnerability allows authenticated and unauthenticated remote attackers t… |
CVE-2024-31845 | Medium | 5.3 | 2024-05-21 | An issue was discovered in Italtel Embrace 1.6.4. The product does not neutralize or incorrectly neutralizes output that is written to logs. The web applicatio… |
CVE-2024-31844 | Medium | 5.3 | 2024-05-21 | An issue was discovered in Italtel Embrace 1.6.4. The server does not properly handle application errors. In some cases, this leads to a disclosure of informat… |
CVE-2024-31843 | Medium | 4.1 | 2024-05-23 | An issue was discovered in Italtel Embrace 1.6.4. The Web application does not properly check the parameters sent as input before they are processed on the ser… |