Cybelesoft vulnerabilities
We track 3 vulnerabilities in Cybelesoft products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on November 13, 2024.
3vulnerabilities
1critical
2high
0exploited
8.4average CVSS score
Latest Cybelesoft vulnerabilities
- 7.3 High severity
thinfinity_workspace: Missing Authentication for Critical Functionality
Cybele Software Thinfinity Workspace before v7.0.2.113 was discovered to contain an access control issue in the Create Profile section. This vulnerability allows attackers to create arbitrary user profiles with elevated privileges.
- 8.1 High severity
thinfinity_workspace: Missing Authentication for Critical Functionality
Incorrect access control in Cybele Software Thinfinity Workspace before v7.0.3.109 allows attackers to gain access to a secondary broker via a crafted request.
- 9.8 Critical severity
thinfinity_workspace: Missing Authentication for Critical Functionality
Cybele Software Thinfinity Workspace before v7.0.2.113 was discovered to contain an access control issue in the API endpoint where Web Sockets connections are established.