Meon vulnerabilities
We track 5 vulnerabilities in Meon products across 2 products. 5 are rated high or critical, and none are known to be exploited. The most recent was published on April 23, 2025.
Latest Meon vulnerabilities
- 9.3 Critical severity
Bidding Solutions: Authorization Bypass Through User-Controlled Key
This vulnerability exists in Meon Bidding Solutions due to improper authorization controls on certain API endpoints for the initiation, modification, or cancellation operations. An authenticated remote attacker could exploit this vulnerability by manipulating
- 8.7 High severity
KYC solutions: Cleartext Transmission of Sensitive Information
This vulnerability exists in the Meon KYC solutions due to transmission of sensitive data in plain text within the response payloads of certain API endpoints. An authenticated remote attacker could exploit this vulnerability by intercepting API response that c
- 8.2 High severity
KYC solutions: Session Fixation
This vulnerability exists in Meon KYC solutions due to improper handling of access and refresh tokens in certain API endpoints of authentication process. A remote attacker could exploit this vulnerability by intercepting and manipulating the responses through
- 8.2 High severity
KYC solutions: Client-Side Enforcement of Server-Side Security
This vulnerability exists in Meon KYC solutions due to insufficient server-side validation of the Captcha in certain API endpoints. A remote attacker could exploit this vulnerability by intercepting the request and removing the Captcha parameter leading to byp
- 8.2 High severity
KYC solutions: Improper Restriction of Excessive Authentication Attempts
This vulnerability exists in Meon KYC solutions due to missing restrictions on the number of incorrect One-Time Password (OTP) attempts through certain API endpoints of login process. A remote attacker could exploit this vulnerability by performing a brute for