ExactSpy vulnerabilities

1 known vulnerability in ExactSpy from 1Byte. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Copy9: Authorization Bypass Through User-Controlled Key

  CVE-2022-0732Feb 24, 20221ByteEPSS 2.51%

  The backend infrastructure shared by multiple mobile device monitoring services does not adequately authenticate or authorize API requests, creating an IDOR (Insecure Direct Object Reference) vulnerability.