Vulnerabilidades en ECOA
13 resultadosAnálisis Vexday
A ECOA apresenta 13 vulnerabilidades conhecidas na base do Vexday, sendo 7 delas críticas, com predomínio de problemas de traversal de diretório (CWE-22). Não há registros de exploração ativa em ambiente wild nem publicações recentes, o que sugere um risco contido, porém estrutural relacionado à validação de caminho de arquivo.
CVE-2021-41291HIGHECOA BAS controller - Path Traversal-1EPSS 82.3%CVE-2021-41293HIGHECOA BAS controller - Path Traversal-3EPSS 20.6%CVE-2021-41290CRITICALECOA BAS controller - Path Traversal-1EPSS 2.3%CVE-2021-41299CRITICALECOA BAS controller - Use of Hard-coded CredentialsEPSS 2.1%CVE-2021-41301CRITICALECOA BAS controller - Exposure of Sensitive Information to an Unauthorized ActorEPSS 2.0%CVE-2021-41294CRITICALECOA BAS controller - Path Traversal-4EPSS 1.2%CVE-2021-41292CRITICALECOA BAS controller - Broken AuthenticationEPSS 1.2%CVE-2021-41300CRITICALECOA BAS controller - Insufficiently Protected Credentials-2EPSS 1.0%CVE-2021-41296CRITICALECOA BAS controller - Weak Password RequirementsEPSS 0.9%CVE-2021-41298HIGHECOA BAS controller - Improper Access ControlEPSS 0.9%CVE-2021-41297HIGHECOA BAS controller - Insufficiently Protected Credentials-1EPSS 0.7%CVE-2021-41295HIGHECOA BAS controller - Cross-Site Request Forgery (CSRF)EPSS 0.4%CVE-2021-41302HIGHECOA BAS controller - Missing Encryption of Sensitive DataEPSS 0.4%