Skip to main content

Iota C Ai

2 CVEs product

Monthly

CVE-2024-52959 Nov 27, 06:15 CRITICAL Act Now

A Improper Control of Generation of Code ('Code Injection') vulnerability in plugin management in iota C.ai Conversational Platform from 1.0.0 through 2.1.3 allows remote authenticated users to. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Code Injection Iota C Ai Gss
NVD
CVSS 4.0
9.3
EPSS
0.6%
CVE-2024-52958 Nov 27, 06:15 CRITICAL Act Now

A improper verification of cryptographic signature vulnerability in plugin management in iota C.ai Conversational Platform from 1.0.0 through 2.1.3 allows remote authenticated users to load a. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Information Disclosure Jwt Attack Iota C Ai Gss
NVD
CVSS 4.0
9.3
EPSS
0.3%
EPSS 1% CVSS 9.3
CRITICAL Act Now

A Improper Control of Generation of Code ('Code Injection') vulnerability in plugin management in iota C.ai Conversational Platform from 1.0.0 through 2.1.3 allows remote authenticated users to. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Code Injection Iota C Ai +1
NVD
EPSS 0% CVSS 9.3
CRITICAL Act Now

A improper verification of cryptographic signature vulnerability in plugin management in iota C.ai Conversational Platform from 1.0.0 through 2.1.3 allows remote authenticated users to load a. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Information Disclosure Jwt Attack Iota C Ai +1
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy