Lucene search
Qualiex Security Vulnerabilities
cve
ForLogic Qualiex v1 and v3 allows any authenticated customer to achieve privilege escalation via user creations, password changes, or user permission updates.
8.8CVSS
8.8AI Score
0.001EPSS
2020-09-02 05:15 PM
23
cve
Because of unauthenticated password changes in ForLogic Qualiex v1 and v3, customer and admin permissions and data can be accessed via a simple request.
9.8CVSS
9.5AI Score
0.002EPSS
2020-09-02 05:15 PM
23
cve
ForLogic Qualiex v1 and v3 has weak token expiration. This allows remote unauthenticated privilege escalation and access to sensitive data via token reuse.
9.8CVSS
9.6AI Score
0.001EPSS
2020-09-02 05:15 PM
21