Application Programming Interface

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2021-36721 MEDIUM This Month

Sysaid API User Enumeration - Attacker sending requests to specific api path without any authorization before 21.3.60 version could get users names from the LDAP server. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Application Programming Interface

NVD

CVSS 3.1

5.3

EPSS

0.4%

CVE-2021-36721

EPSS 0% CVSS 5.3

MEDIUM This Month

Sysaid API User Enumeration - Attacker sending requests to specific api path without any authorization before 21.3.60 version could get users names from the LDAP server. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Application Programming Interface

NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy