CVE-2024-8074CWE-306CWE-862

Sensetive Data Exposure in Nomysoft Informatics' Nomysem

Critical · published November 12, 2024

CVSS v4.0
9.3
EPSS
0%
Percentile
33.9
In the wild
Unconfirmed
What it is

Missing Authentication for Critical Function, Missing Authorization vulnerability in Nomysoft Informatics Nomysem allows Collect Data as Provided by Users.

This issue affects Nomysem: before 13.10.2024.

The record
Technical detail
CVSS v4.0
9.3 · CRITICAL
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:H/SI:L/SA:N
EPSS
0.00408 · 33.9th percentile
Weaknesses
CWE-306 · Missing Authentication for Critical Function; CWE-862 · Missing Authorization
Published
2024-11-12T14:45Z
EPSS history
Timeline
  • 12 NOV 14:45Z
    Sensetive Data Exposure in Nomysoft Informatics' Nomysem
    cvelistv5