Mv

mv

4 CVEs • 2 products

Products (2)

Click to collapse

Toggle

CVEs (4)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2022-30496 1Mv 1Idce Jun 17, 2026 Jun 2, 2022 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 SQL injection in Logon Page of IDCE MV's application, version 1.0, allows an attacker to inject SQL payloads in the user field, connecting to a database to access enterprise's private and sensitive information.
CVE-2020-23283 1Mv 1Mconnect Jun 17, 2026 Jul 21, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Information disclosure in Logon Page in MV's mConnect application v02.001.00 allows an attacker to know valid users from the application's database via brute force.
CVE-2020-23282 1Mv 1Mconnect Jun 17, 2026 Jul 21, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 SQL injection in Logon Page in MV's mConnect application, v02.001.00, allows an attacker to use a non existing user with a generic password to connect to the application and get access to unauthorized information.
CVE-2020-23284 1Mv 1Idce Jun 17, 2026 Jul 20, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Information disclosure in aspx pages in MV's IDCE application v1.0 allows an attacker to copy and paste aspx pages in the end of the URL application that connect into the database which reveals internal and sensitive inf...Show more Information disclosure in aspx pages in MV's IDCE application v1.0 allows an attacker to copy and paste aspx pages in the end of the URL application that connect into the database which reveals internal and sensitive information without logging into the web application.Show less