Filtered by vendor Opengoofy Subscriptions
Filtered by product Hippo4j Subscriptions
Total 3 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2023-27095 1 Opengoofy 1 Hippo4j 2024-08-02 6.5 Medium
Insecure Permissions vulnerability found in OpenGoofy Hippo4j v.1.4.3 allows attacker toescalate privileges via the AddUser method of the UserController function in Tenant Management module.
CVE-2023-27094 1 Opengoofy 1 Hippo4j 2024-08-02 8.8 High
An issue found in OpenGoofy Hippo4j v.1.4.3 allows attackers to escalate privileges via the ThreadPoolController of the tenant Management module.
CVE-2023-27096 1 Opengoofy 1 Hippo4j 2024-08-02 6.5 Medium
Insecure Permissions vulnerability found in OpenGoofy Hippo4j v.1.4.3 allows attacker to obtain sensitive information via the ConfigVerifyController function of the Tenant Management module.