Arandasoft vulnerabilities
We track 1 vulnerability in Arandasoft products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on September 26, 2025.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest Arandasoft vulnerabilities
- 7.5 High severity
Passrecovery: Exposure of Sensitive Information to an Unauthorized Actor
An issue in Aranda PassRecovery v1.0 allows attackers to enumerate valid user accounts in Active Directory via sending a crafted POST request to /user/existdirectory/1.