CVE-2021-36723CWE-359

Emuse - eServices / eNvoice Exposure Of Private Personal Information

Medium · published December 29, 2021

CVSS v3.1
6.1
EPSS
1%
Percentile
45.1
In the wild
Unconfirmed
What it is

Emuse - eServices / eNvoice Exposure Of Private Personal Information due to lack of identification mechanisms and predictable IDs an attacker can scrape all the files on the service.

The record
Technical detail
CVSS v3.1
6.1 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00548 · 45.1th percentile
Weakness
CWE-359 · Exposure of Private Personal Information to an Unauthorized Actor
Published
2021-12-29T14:12Z
EPSS history
Timeline
  • 29 DEC 14:12Z
    Emuse - eServices / eNvoice Exposure Of Private Personal Information
    cvelistv5