Vulnerability index

Browse CVEs

4 matching

Cards Compact

Filters 1 Clear all

Keyword

Severity

Any Critical High Medium Low

Technology

Recency

Analysis

Fix

Sort

Exploited (KEV) only

Filters apply as you choose them.

MEDIUM 6.5 CVE-2020-26175 In tangro Business Workflow before 1.18.1, an attacker can manipulate the value of PERSON in requests to /api/profile in order to change profile info… Business Workflow 1.18.1+ Fix from $1,6002020-12-18 MEDIUM 5.3 CVE-2020-26178 In tangro Business Workflow before 1.18.1, knowing an attachment ID, it is possible to download workitem attachments without being authenticated. Business Workflow 1.18.1+ Fix from $1,6002020-12-18 HIGH 8.8 CVE-2020-26174 tangro Business Workflow before 1.18.1 requests a list of allowed filetypes from the server and restricts uploads to the filetypes contained in this … Business Workflow 1.18.1+ Fix from $1,9502020-12-18 MEDIUM 6.5 CVE-2020-26172 Every login in tangro Business Workflow before 1.18.1 generates the same JWT token, which allows an attacker to reuse the token when a session is act… Business Workflow 1.18.1+ Fix from $1,6002020-12-18