CVE-2024-32862CWE-942

exacqVision CORS

Medium · published August 1, 2024

CVSS v3.1
6.8
EPSS
0%
Percentile
36.3
In the wild
Unconfirmed
What it is

Under certain circumstances the ExacqVision Web Services does not provide sufficient protection from untrusted domains.

The record
Technical detail
CVSS v3.1
6.8 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00431 · 36.3th percentile
Weakness
CWE-942 · Permissive Cross-domain Security Policy with Untrusted Domains
Published
2024-08-01T21:57Z
EPSS history
Timeline
  • 01 AUG 21:57Z
    exacqVision CORS
    cvelistv5