Skip to content
OpenAdvisories

Product · CHANGING Information Technology

IDExpert

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.1
    CVE-2024-10652

    CHANGING Information Technology IDExpert - Reflected XSS

    IDExpert from CHANGING Information Technology does not properly validate a parameter for a specific functionality, allowing unauthenticated remote attackers to inject JavsScript code and perform Reflected Cross-site scripting attacks.

    CHANGING Information Technology IDExpert
  • Medium 4.9
    CVE-2024-10651

    CHANGING Information Technology IDExpert - Arbitrary File Read through Path Traversal

    IDExpert from CHANGING Information Technology does not properly validate a specific parameter in the administrator interface, allowing remote attackers with administrator privileges to exploit this vulnerability to read arbitrary system files.

    CHANGING Information Technology IDExpert