← Back

Servisnet

servisnet

3 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Tessa
tessa

CVEs (3)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Servisnet
1Tessa
Nov 21, 2024
Feb 6, 2022
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
An issue was discovered in Servisnet Tessa 0.0.2. An attacker can obtain sensitive information via a /js/app.js request.
1Servisnet
1Tessa
Nov 21, 2024
Feb 6, 2022
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
An issue was discovered in Servisnet Tessa 0.0.2. Authorization data is available via an unauthenticated /data-service/users/ request.
1Servisnet
1Tessa
Nov 21, 2024
Feb 6, 2022
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
An issue was discovered in Servisnet Tessa 0.0.2. An attacker can add a new sysadmin user via a manipulation of the Authorization HTTP header.