Veille CVE

‹ Retour à la liste

CVE-2026-115803

4.3 Moyenne

Publiée le 24/10/2026 à 09:16 · Modifiée le 24/10/2026 à 09:16 · Analyse NVD reportée · Source : cna@vuldb.com

Description

A flaw has been found in Scada-LTS 2.8.0. Affected by this vulnerability is the function HttpServletRequest.getParameter of the file AmChartValuesAPI.java of the component AmCharts Data API. Executing a manipulation of the argument ids can lead to authorization bypass. The attack can be executed remotely. The exploit has been published and may be used. The vendor announces: "At this moment we are working on new release with security enhancements which will be introduced to the community soon."

Traduire en français

Produits concernés

Scores CVSS

VersionScoreSourceVecteur
4.0 2.1 Faible cna@vuldb.com CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
3.1 4.3 Moyenne cna@vuldb.com (NVD) CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
2.0 4.0 Moyenne cna@vuldb.com AV:N/AC:L/Au:S/C:P/I:N/A:N

Faiblesses (CWE)

Références

Ailleurs