Uab Lexita vulnerabilities
We track 2 vulnerabilities in Uab Lexita products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on August 5, 2024.
2vulnerabilities
0critical
2high
0exploited
8.2average CVSS score
Latest Uab Lexita vulnerabilities
- 8.8 High severity
panteracrm_cms: Improper Access Control
A mass assignment vulnerability exists in Pantera CRM versions 401.152 and 402.072. This flaw allows authenticated users to modify any user attribute, including roles, by injecting additional parameters via profile management functions.
- 7.5 High severity
panteracrm_cms: Incorrect Authorization
A vulnerability in Pantera CRM versions 401.152 and 402.072 allows unauthorized attackers to bypass IP-based access controls by manipulating the X-Forwarded-For header.