Reedos Software Solutions vulnerabilities
We track 2 vulnerabilities in Reedos Software Solutions products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on September 11, 2024.
2vulnerabilities
1critical
1high
0exploited
8.7average CVSS score
Latest Reedos Software Solutions vulnerabilities
- 9.8 Critical severity
Mutual Fund Distribution Product (aiM-Star): Improper Restriction of Excessive Authentication Attempts
This vulnerability exists in Reedos aiM-Star version 2.0.1 due to missing restrictions for excessive failed authentication attempts on its API based login. A remote attacker could exploit this vulnerability by conducting a brute force attack against legitimate
- 7.5 High severity
Mutual Fund Distribution Product (aiM-Star): Improper Control of Interaction Frequency
This vulnerability exists in Reedos aiM-Star version 2.0.1 due to missing rate limiting on OTP requests in certain API endpoints. An authenticated remote attacker could exploit this vulnerability by sending multiple OTP request through vulnerable API endpoints