EY
Vendor
Eyecomms
2
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2019-17605 | EY Eyecms Eyecomms | 8.8 | Nov 7 | A mass assignment vulnerability in eyecomms eyeCMS through 2019-10-15 allows any candidate to take over another candidate's account (by also exploiting CVE-2019-17604) via a… |
| CVE-2019-17604 | EY Eyecms Eyecomms | 4.3 | Nov 7 | An Insecure Direct Object Reference (IDOR) vulnerability in eyecomms eyeCMS through 2019-10-15 allows any candidate to change other candidates' personal information (first name,… |