← Back

Subex

subex

2 CVEs • 2 products

Products (2)

Click to collapse
Toggle
Roc Fraud Management System
roc_fraud_management_system
1 CVE
Roc Partner Settlement
roc_partner_settlement
1 CVE

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2020-9384
1Subex
1Roc Partner Settlement
Jun 17, 2026
Apr 14, 2020
N/A· v4
8.8 HIGH· v3
6.5 MEDIUM· v2
An Insecure Direct Object Reference (IDOR) vulnerability in the Change Password feature of Subex ROC Partner Settlement 10.5 allows remote authenticated users to achieve account takeover via manipulation of POST paramete...Show more
An Insecure Direct Object Reference (IDOR) vulnerability in the Change Password feature of Subex ROC Partner Settlement 10.5 allows remote authenticated users to achieve account takeover via manipulation of POST parameters. NOTE: This vulnerability may only affect a testing version of the applicationShow less
CVE-2014-8728
1Subex
1Roc Fraud Management System
May 6, 2026
Dec 2, 2014
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in the login page (login/login) in Subex ROC Fraud Management (aka Fraud Management System and FMS) 7.4 and earlier allows remote attackers to execute arbitrary SQL commands via the ranger_use...Show more
SQL injection vulnerability in the login page (login/login) in Subex ROC Fraud Management (aka Fraud Management System and FMS) 7.4 and earlier allows remote attackers to execute arbitrary SQL commands via the ranger_user[name] parameter.Show less