Marvalglobal Marval Msm
5 CVEs affecting Marvalglobal Marval Msm. Latest disclosed: 2022-06-28. Critical: 2, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-31887 | Critical | 9.8 | 2022-06-28 | Marval MSM v14.19.0.12476 has a 0-Click Account Takeover vulnerability which allows an attacker to change any user's password in the organization, this means t… |
CVE-2022-31885 | Critical | 9.8 | 2022-06-28 | Marval MSM v14.19.0.12476 is vulnerable to OS Command Injection due to the insecure handling of VBScripts. |
CVE-2022-31883 | High | 8.8 | 2022-06-28 | Marval MSM v14.19.0.12476 is has an Insecure Direct Object Reference (IDOR) vulnerability. A low privilege user is able to see other users API Keys including t… |
CVE-2022-31884 | Medium | 6.5 | 2022-06-28 | Marval MSM v14.19.0.12476 has an Improper Access Control vulnerability which allows a low privilege user to delete other users API Keys including high privileg… |
CVE-2022-31886 | Medium | 6.5 | 2022-06-28 | Marval MSM v14.19.0.12476 is vulnerable to Cross Site Request Forgery (CSRF). An attacker can disable the 2FA by sending the user a malicious form. |