Description
The Appriss Insights (Equifax) Victim Information Notification Exchange (VINE) applications allow an unauthenticated attacker to send a specially-crafted request to bypass the login page, access other users' credentials, take over other user accounts, access sensitive PII, and dump other information from the database.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Appriss Insights | Victim Information Notification Exchange (VINE) | < 2026-05-07 | 2026-05-07 |
Advisories 1
- VA-26-204-01 Appriss Insights VINE Application SQL Injection CISA ICS & IT advisories · Aug 4, 2026