Researchers
Back
Raj Kumar Yadav
#13631
of 60,594
23.5
Total CVSS
Vulnerabilities
·
3
High
3
PT-2019-9094
2019-04-30
8.8
CVE-2018-15206
Bpc
Bpc Smartvista 2
The issue is related to a CSRF problem. It affects the `/SVFE2/pages/admpages/roles/createrole.jsf` API endpoint.
PT-2019-9095
2019-04-30
7.2
CVE-2018-15207
Bpc
Bpc Smartvista
The issue is related to improper access control in the SVFE module. A normal user can access the "SVFE2/pages/finadmin/currconvrate/currconvrate.jsf" functionality, which should only be accessible to an admin.
PT-2019-9096
2019-04-30
7.5
CVE-2018-15208
Bpc
Bpc Smartvista
The issue concerns a session fixation problem via the `JSESSIONID` parameter.