CyberSecBulletin

Seccome vulnerabilities

We track 5 vulnerabilities in Seccome products. 5 are rated high or critical, and none are known to be exploited. The most recent was published on October 28, 2022.

5vulnerabilities
5critical
0high
0exploited
9.8average CVSS score

Latest Seccome vulnerabilities

  • 9.8 Critical severity

    Ehoney: Incorrect Privilege Assignment

    CVE-2022-3735Seccome

    A vulnerability was found in seccome Ehoney. It has been rated as critical. This issue affects some unknown processing of the file /api/public/signup. The manipulation leads to improper access controls. The identifier VDB-212417 was assigned to this vulnerabil

  • 9.8 Critical severity

    Ehoney: Improper Neutralization of Special Elements used in an SQL Command

    CVE-2022-3732Seccome

    A vulnerability was found in seccome Ehoney and classified as critical. Affected by this issue is some unknown functionality of the file /api/v1/bait/set. The manipulation of the argument Payload leads to sql injection. The attack may be launched remotely. VDB

  • 9.8 Critical severity

    Ehoney: Improper Neutralization

    CVE-2022-3731Seccome

    A vulnerability has been found in seccome Ehoney and classified as critical. Affected by this vulnerability is an unknown functionality of the file /api/v1/attack/token. The manipulation of the argument Payload leads to sql injection. The attack can be launche

  • 9.8 Critical severity

    Ehoney: Improper Neutralization

    CVE-2022-3730Seccome

    A vulnerability, which was classified as critical, was found in seccome Ehoney. Affected is an unknown function of the file /api/v1/attack/falco. The manipulation of the argument Payload leads to sql injection. It is possible to launch the attack remotely. The

  • 9.8 Critical severity

    Ehoney: Improper Neutralization of Special Elements used in an SQL Command

    CVE-2022-3729Seccome

    A vulnerability, which was classified as critical, has been found in seccome Ehoney. This issue affects some unknown processing of the file /api/v1/attack. The manipulation of the argument AttackIP leads to sql injection. The attack may be initiated remotely.