CyberSecBulletin

EmpowerID vulnerabilities

We track 1 vulnerability in EmpowerID products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on August 11, 2023.

1vulnerabilities
1critical
0high
0exploited
9.1average CVSS score

Latest EmpowerID vulnerabilities

  • 9.1 Critical severity

    Empowerid: Improper Authentication

    CVE-2023-40260EmpowerID

    EmpowerID before 7.205.0.1 allows an attacker to bypass an MFA (multi factor authentication) requirement if the first factor (username and password) is known, because the first factor is sufficient to change an account's email address, and the product would th