Brokeragetechnologysolutions vulnerabilities
We track 2 vulnerabilities in Brokeragetechnologysolutions products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on November 4, 2024.
2vulnerabilities
1critical
1high
0exploited
8.7average CVSS score
Latest Brokeragetechnologysolutions vulnerabilities
- 7.5 High severity
Aero: Reliance on Untrusted Inputs in a Security Decision
This vulnerability exists in Aero due to improper implementation of OTP validation mechanism in certain API endpoints. An authenticated remote attacker could exploit this vulnerability by intercepting and manipulating the responses exchanged during the second
- 9.8 Critical severity
Wave 2.0: Improper Restriction of Excessive Authentication Attempts
This vulnerability exists in the Wave 2.0 due to missing restrictions for excessive failed authentication attempts on its API based login. A remote attacker could exploit this vulnerability by conducting a brute force attack against legitimate user OTP, MPIN o