AsiaInfo International vulnerabilities
We track 2 vulnerabilities in AsiaInfo International products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on November 10, 2026.
2vulnerabilities
2critical
0high
0exploited
9.8average CVSS score
Latest AsiaInfo International vulnerabilities
- 9.8 Critical severity
Business Support System: Improper Verification of Cryptographic Signature
AsiaInfo Business Support System (BSS) 9.2.0 through 9.2.40 does not correctly verify cryptographic signatures for JSON Web Tokens (JWT). A remote, unauthenticated attacker could forge a well-formed JWT without a valid signature and use it to execute privilege
- 9.8 Critical severity
Business Support System: Missing Authentication for Critical Functionality
AsiaInfo Business Support System (BSS) 9.2.0 through 9.2.40 accepts unauthenticated requests via the management API '/bss/sysmgnt/api/'. A remote, unauthenticated attacker could provision a new account with administrative privileges or take over existing accou